Most recent entries from all

bdu:2024-00108

certfr-2024-avi-0054 — Une vulnérabilité a été découverte dans Exim. Elle permet à un attaquant de provoquer un contournement de la politique…

certfr-2024-avi-0054

CLEANSTART-2025-LV68873 — Exim before 4

Affected: CleanStart: exim

Security vulnerability affects the exim package. Exim before 4.

EUVD-2026-259338

fkie_cve-2023-51766

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

GHSA-w6ww-869j-cgm6

Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages that appear to originate from the Exim server, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

gsd-2023-51766

OESA-2024-1926 — exim security update

Affected: openEuler:22.03-LTS-SP3: exim

Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail. Security Fix(es): A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.(CVE-2022-3559) Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.(CVE-2023-51766)

openSUSE-SU-2024:0007-1 — Security update for exim

Security update for exim

UBUNTU-CVE-2023-51766

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4

WID-SEC-W-2023-3206 — SMTP Implementierungen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen SMTP Implementierungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.