CVE-2005-0021
Fixed in a distro release EPSS 3%
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
Products: university_of_cambridge exim
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | exim4 | 4.34-10 |
| Debian 13 | exim4 | 4.34-10 |
| Debian 14 | exim4 | 4.34-10 |
| Debian 3.0 | exim | 3.35-1woody4 |
| Debian 3.0 | exim-tls | 3.35-3woody3 |
| Red Hat Enterprise Linux 4 | exim | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-debuginfo | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-doc | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-mon | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-sa | 0:4.43-1.RHEL4.3 |