Vulnerabilitycritical

Critical Exim flaw opens servers to remote code execution, patch now!

Help Net Securityby @zeljkazorzSep 9, 2019 · 00:00 UTC (Sep 9, 2019)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2019-15846 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-15846 CVE-2019-10149

Tags: cve-2019-15846 cve-2019-10149 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-10149	Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA	9.8	100%	KEVPoC ×5	Jun 5, 2019 KEV Jan 10, 2022
CVE-2019-15846	Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash	9.8	36%		Sep 6, 2019

From the original article

2 min read at helpnetsecurity.com

The Exim mail transfer agent (MTA) is impacted by a critical vulnerability that may allow local or unauthenticated remote attackers to execute programs with root privileges on the underlying system. Exim is the most widely used MTA today and is deployed on over half of all Internet-facing mail servers. It’s efficient, highly configurable, bundled with most Unix-like systems – and free.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.