| Package | Affected versions | Patched versions |
|---|---|---|
| exim | = 3.0= 3.11= 3.12= 3.13= 3.14= 3.15= 3.16= 3.17= 3.18= 3.19= 3.20= 3.21= 3.22= 3.3= 3.3.1= 3.3.2= 3.30= 3.31= 3.32= 3.33= 3.34= 3.35= 3.36= 4.10= 4.20 |
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free