PT-2002-2293 · Exim · Exim

Published 2002-12-23 · Updated 2017-10-10 · CVE-2002-1381

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Exim versions 3.x through 3.36 Exim versions 4.x through 4.10

Description The issue is related to a format string vulnerability in the daemon.c file. This vulnerability allows administrative users to execute arbitrary code by modifying the pid file path value.

Recommendations For Exim versions 3.x through 3.36, update to a version that contains a fix for this issue. For Exim versions 4.x through 4.10, update to a version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2002-1381

Affected Products

Exim

References · 11

• 🔥 https://exploit-db.com/exploits/22066 · Exploit
• 🔥 http://groups.yahoo.com/group/exim-users/message/42358 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1381 · Security Note
• http://marc.info/?l=bugtraq&m=104006219018664&w=2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1381 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1381 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1381 · Vendor Advisory
• http://securityfocus.com/bid/6314 · Note
• http://exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html · Note
• http://marc.info/?l=bugtraq&m=103903403527788&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10761 · Note