CVE-2005-0022
Fixed in a distro release EPSS <1%
Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication.
Products: university_of_cambridge exim
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | exim4 | 4.34-10 |
| Debian 13 | exim4 | 4.34-10 |
| Debian 14 | exim4 | 4.34-10 |
| Red Hat Enterprise Linux 4 | exim | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-debuginfo | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-doc | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-mon | 0:4.43-1.RHEL4.3 |
| Red Hat Enterprise Linux 4 | exim-sa | 0:4.43-1.RHEL4.3 |