| Package | Affected versions | Patched versions |
|---|---|---|
| exim | ≥ 4.00, < 4.94.2 | 4.94.2 |
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free