Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Qualys researchers uncover 21 bugs in Exim mail servers

CyberScoopby @shanvav ()3 min read1 · 1 read
Analyze CVE-2020-28017 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2020-28017
Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients
9.837%

From the original article

3 min read at cyberscoop.com

It's the kind of access the NSA has described as a "dream" for Russian hackers. Researchers have found 21 unique vulnerabilities in Exim, a popular mail transfer agent, some of which would allow hackers to run full remote unauthenticated code execution against targets, the Qualys Research Team announced Tuesday.

CyberScoop

By @shanvav · cyberscoop.com

Read the full article at CyberScoop

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.