RCE in Sa-Exim

CVE-2006-1251

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.

Affected products

  • Sa-exim — versions 4.0, 4.1, 4.2
  • N/a — versions n/a

Weakness classification (CWE)

References