Exim Mail Transfer Agent (MTA) Improper Input Validation

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00020.html · Mailing List
• packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html · Exploit
• packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege-Escalation.html · Exploit
• packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege-Escalation.html · Exploit
• seclists.org/fulldisclosure/2019/Jun/16 · Mailing List
• openwall.com/lists/oss-security/2019/06/05/2 · Mailing List
• openwall.com/lists/oss-security/2019/06/05/3 · Mailing List
• openwall.com/lists/oss-security/2019/06/05/4 · Exploit
• openwall.com/lists/oss-security/2019/06/06/1 · Exploit
• openwall.com/lists/oss-security/2019/07/25/6 · Mailing List

exim のその他の脆弱性

• CVE-2026-94057中 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056高 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055中 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054中 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141高 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.