Multiple Vulnerabilities in Exim Could Allow for Remote Code Execution

guest · Aug 9, 2022

MS-ISAC ADVISORY NUMBER: 2022-0100

DATE(S) ISSUED: 08/08/2022
OVERVIEW:
Multiple vulnerabilities have been discovered in Exim, the most severe of which could allow for remote code execution. Exim is a mail transfer agent used to deploy mail servers on Unix-like systems. Successful exploitation of the most severe of these vulnerabilities will enable the attacker to perform command execution as root in the context of the mail server. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
THREAT INTELLIGENCE:
Proof of concept code has been released for CVE-2022-37451 and CVE-2022-37452
Click to expand...

SYSTEMS AFFECTED:

Exim versions prior to 4.96

Click to expand...

Log in or Sign up

Multiple Vulnerabilities in Exim Could Allow for Remote Code Execution

guest Guest

Log in or Sign up

Multiple Vulnerabilities in Exim Could Allow for Remote Code Execution

guest Guest

Useful Searches