CVE-2003-0743
High
Description
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.
SeverityHigh
CVSS7.5
Exploit probability93. percentile5.7%
ProductUniversity Of Cambridge Exim
PublishedOct 20, 2003
First seenOct 20, 2003
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| university_of_cambridge exim | 3.0, 3.3, 3.3.1, 3.3.2, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.30, 3.31, 3.32, 3.33, 3.34, 3.35, 3.36, 4.10, 4.20 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.