PT-2018-1057 · Exim+3 · Exim+3

Hackk.Gr · Published 2018-02-05 · Updated 2025-08-04 · CVE-2018-6789

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.90.1

Description An issue in the base64d function in the SMTP listener of Exim can cause a buffer overflow when processing handcrafted messages. This can be exploited to execute code remotely. The vulnerability is triggered by sending specially crafted data in the AUTH command and manipulating the sender's hostname in the EHLO command. The issue arises when handling data with a size not divisible by 4.

Recommendations For versions prior to 4.90.1, update to version 4.90.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SMTP listener or disabling the base64d function until a patch is applied. Avoid using the AUTH command with untrusted input and restrict manipulation of the sender's hostname in the EHLO command to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

ALT-PU-2018-1409

ALT-PU-2020-2318

ALT-PU-2021-1764

ALT-PU-2022-2269

BDU:2018-00395

CVE-2018-6789

DLA-1274-1

DSA-4110-1

OPENSUSE-SU-2018_0468-1

OPENSUSE-SU-2021:0677-1

OPENSUSE-SU-2021:0753-1

OPENSUSE-SU-2021:0754-1

OPENSUSE-SU-2021_0677-1

OPENSUSE-SU-2024:10746-1

USN-3565-1

Affected Products

Alt Linux

Exim

Suse

Ubuntu

References · 210

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/exim_perl_startup.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/lucky/bad_actor_poc · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2019-15846 · Exploit
• 🔥 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 · Exploit
• 🔥 https://github.com/Diefunction/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cowbe0x004/eximrce-CVE-2019-10149 · Exploit
• 🔥 https://github.com/MNEMO-CERT/PoC--CVE-2019-10149_Exim · Exploit
• 🔥 https://github.com/martinclauss/exim-rce-cve-2018-6789 · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2018-6789 · Exploit
• 🔥 https://github.com/AzizMea/CVE-2019-10149-privilege-escalation · Exploit
• 🔥 https://github.com/dorkerdevil/CVE-2020-28018 · Exploit
• 🔥 https://github.com/darsigovrustam/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cloudflare/exim-cve-2019-10149-data · Exploit