Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe,

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• redhat linuxall versions
• university of cambridge eximup to 3.22 inclusive

Other highest-scoring records for the same primary product.

• CVE-2004-0399Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cau
  36Monitor
• CVE-2004-0400Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denia
  32Monitor
• CVE-2003-0743Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute
  32Monitor
• CVE-2005-0021Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 compone
  29Monitor
• CVE-2002-1381Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitra
  29Monitor
• CVE-1999-0971Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
  28Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.