Vulnerabilitycritical
Most of Exim email servers could be hacked by exploiting 21Nails flaws
- CVEs
- CVE-2020-28007CVE-2020-28008CVE-2020-28014CVE-2021-27216CVE-2020-28011CVE-2020-28010CVE-2020-28013CVE-2020-28016CVE-2020-28015CVE-2020-28012CVE-2020-28009CVE-2020-28017CVE-2020-28020CVE-2020-28023CVE-2020-28021CVE-2020-28022CVE-2020-28026CVE-2020-28019CVE-2020-28024CVE-2020-28018CVE-2020-28025CVE-2019-10149CVE-2019-16928CVE-2019-15846
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-10149 | Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA | 9.8 | 100% | KEVPoC ×5 | KEV |
| CVE-2019-15846 | Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash | 9.8 | 36% | ||
| CVE-2019-16928 | Exim Out-of-bounds Write Vulnerability | 9.8 | 42% | KEVPoC ×2 | KEV |
| CVE-2020-28018 | Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL | 9.8 group max | 57% |
From the original article
3 min read at securityaffairs.com
The maintainers of the Exim email server software addressed a collection of 21 issues, dubbed 21Nails, that can allow attackers to fully compromise mail servers. The maintainers of the Exim email server software have released security updates to address a collection of 21 vulnerabilities, dubbed 21Nails , that can be exploited by attackers to take over servers and access email traffic through them.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.