high7.2Public exploit code
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifyin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Exim Internet Mailer 3.35/3.36/4.10 - Format String2002-12-04 · local · linux · Verified
Impact
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| University Of Cambridge | Exim | Versions 3.35, 3.36, 4.10 |
References
- NVD record
- CVE.org record
- http://groups.yahoo.com/group/exim-users/message/42358
- http://marc.info/?l=bugtraq&m=103903403527788&w=2
- http://marc.info/?l=bugtraq&m=104006219018664&w=2
- http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
- http://www.securityfocus.com/bid/6314
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10761
- http://groups.yahoo.com/group/exim-users/message/42358
- http://marc.info/?l=bugtraq&m=103903403527788&w=2
- http://marc.info/?l=bugtraq&m=104006219018664&w=2
- http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
- http://www.securityfocus.com/bid/6314
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10761