CVE-2005-0021

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.62% chance of exploitation in the next 30 days, 85th percentile

Published

2005-01-06

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/1009
• https://www.exploit-db.com/exploits/756

Security advisories

• http://security.gentoo.org/glsa/glsa-200501-23.xml
• http://www.debian.org/security/2005/dsa-635
• http://www.debian.org/security/2005/dsa-637
• http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities
• http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities
• http://www.kb.cert.org/vuls/id/132992
• http://www.redhat.com/support/errata/RHSA-2005-025.html

References

• CVE Record
• NVD entry