peter bassill · operator
$ cve CVE-2005-0021 JSON

CVE-2005-0021 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 2.6% (pctl 85)

Patch early

A public exploit exists.

Description

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS2.62% — more likely to be exploited than 85% of all CVEs
On CISA KEVno
Public exploityes
Published2005-05-02
Last modified2026-06-16

Affected (1)

VendorProduct
university of cambridgeexim

Public exploits

SourceTitleDate
exploit-dbExim 4.41 - 'dns_build_reverse' Local Read Emails2005-05-25
exploit-dbExim 4.41 - 'dns_build_reverse' Local Buffer Overflow2005-01-15

References

→ the Explorer  ·  watch your stack  ·  NVD