Unscored severity · published Dec 23, 2002
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EX
Exim · University OF Cambridge
3.35; 3.36; 4.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1381
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1381
Exploit
http://groups.yahoo.com/group/exim-users/message/42358
marc.info
http://marc.info/?l=bugtraq&m=103903403527788&w=2
marc.info
http://marc.info/?l=bugtraq&m=104006219018664&w=2
www.exim.org
http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
www.securityfocus.com
http://www.securityfocus.com/bid/6314
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/10761
More from Exim
–
CVE-2005-0022
Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers…
–
CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be…
–
CVE-2004-0399
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly…
–
CVE-2004-0400
Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute…
–
CVE-2003-0743
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO…