Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

CVE-2019-15846 Exim mail server flaw allows Remote Code Execution

Security Affairsby @securityaffairs ()2 min read3
Read at securityaffairs.com
Analyze CVE-2019-15846 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2019-15846CVE-2019-10149
Tags
cve-2019-15846cve-2019-10149vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2019-10149
Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA
9.8100%KEVPoC ×5
KEV
CVE-2019-15846
Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash
9.836%

From the original article

2 min read at securityaffairs.com

A security flaw in Exim mail servers could be exploited by local or remote attackers to execute arbitrary code with root privileges. The Exim development team has addressed a vulnerability in Exim mail server, tracked as CVE-2019-15846, that could be exploited by local and remote attackers to execute arbitrary code with root privileges. The vulnerability is a heap overflow that affects version 4.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.