CVE-2003-0743 in Eximinfo

Summary

Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

09/04/2003

Disclosure

10/20/2003

Entries

1

CPE

ready

CVSS

7.3

EPSS

0.07018

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!