Lucene search
AttackerKBAKB:D6CD45B9-F610-4480-99E7-80A4065DF5FDHistoryMay 28, 2020 - 12:00 a.m.
CVE-2019-10149
2020-05-2800:00:00
attackerkb.com
51
0.974 High
EPSS
Percentile
99.9%
Exim unauthenticated RCE with reports that it’s been used by Sandworm since August 2019
Recent assessments:
ericalexanderorg at May 28, 2020 4:49pm UTC reported:
Untested POC exists
https://github.com/MNEMO-CERT/PoC—CVE-2019-10149_Exim/blob/master/PoC_CVE-2019-10149.py
gwillcox-r7 at November 04, 2020 4:03pm UTC reported:
Untested POC exists
https://github.com/MNEMO-CERT/PoC—CVE-2019-10149_Exim/blob/master/PoC_CVE-2019-10149.py
Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 3
Related
msrc
msrc
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
2019-06-13 07:00:00
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
2019-06-14 00:27:32
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
2019-06-13 07:00:00
amazon
amazon
Critical: exim
2019-06-05 17:12:00
freebsd
freebsd
Exim -- RCE in deliver_message() function
2019-05-27 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4010-1)
2019-06-06 00:00:00
Exim 4.87 - 4.91 RCE Vulnerability
2019-06-07 00:00:00
Debian: Security Advisory (DSA-4456-1)
2019-06-06 00:00:00
nessus
nessus
Ubuntu 18.04 LTS : Exim vulnerability (USN-4010-1)
2019-06-07 00:00:00
openSUSE Security Update : exim (openSUSE-2019-1524)
2019-06-12 00:00:00
Debian DSA-4456-1 : exim4 - security update
2019-06-07 00:00:00
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of SMTP
2020-10-02 13:58:23
githubexploit
githubexploit
Exploit for OS Command Injection in Exim
2019-10-21 08:13:27
Exploit for OS Command Injection in Exim
2019-07-25 00:46:37
Exploit for OS Command Injection in Exim
2019-06-13 23:21:53
packetstorm
packetstorm
Exim 4.91 Local Privilege Escalation
2019-08-23 00:00:00
Exim 4.91 Local Privilege Escalation
2019-06-17 00:00:00
zdt
zdt
Exim 4.91 Local Privilege Escalation Exploit
2019-06-17 00:00:00
Exim 4.87 / 4.91 - Local Privilege Escalation Exploit
2019-08-23 00:00:00
Exim 4.87 < 4.91 - (Local / Remote) Command Execution Exploit
2019-06-07 00:00:00
attackerkb
attackerkb
CVE-2019-10149
2019-06-05 00:00:00
osv
osv
CVE-2019-10149
2019-06-05 14:29:11
exim4 - security update
2019-06-05 00:00:00
cvelist
cvelist
CVE-2019-10149
2019-06-05 00:00:00
ubuntu
ubuntu
Exim vulnerability
2019-06-05 00:00:00
ubuntucve
ubuntucve
CVE-2019-10149
2019-06-04 00:00:00
debian
debian
[SECURITY] [DSA 4456-1] exim4 security update
2019-06-05 15:35:03
[SECURITY] [DSA 4456-1] exim4 security update
2019-06-05 15:35:03
exploitpack
exploitpack
Exim 4.87 - 4.91 - Local Privilege Escalation
2019-06-17 00:00:00
Exim 4.87 4.91 - (Local Remote) Command Execution
2019-06-05 00:00:00
cisa_kev
cisa_kev
Exim Mail Transfer Agent (MTA) Improper Input Validation
2022-01-10 00:00:00
debiancve
debiancve
CVE-2019-10149
2019-06-05 14:29:11
cve
cve
CVE-2019-10149
2019-06-05 14:29:11
suse
suse
Security update exim (important)
2019-06-07 00:00:00
Security update for exim (critical)
2021-05-07 00:00:00
Security update for exim (critical)
2021-05-20 00:00:00
checkpoint_advisories
checkpoint_advisories
Exim Mail Server Remote Code Execution (CVE-2019-10149)
2019-06-12 00:00:00
myhack58
myhack58
canvas
canvas
Immunity Canvas: EXIM_EXPANSION_RCE
2019-06-05 14:29:00
metasploit
metasploit
Exim 4.87 - 4.91 Local Privilege Escalation
2019-07-04 14:02:03
gentoo
gentoo
Exim: Remote command execution
2019-06-06 00:00:00
qualysblog
qualysblog
Exim MTA Vulnerability (The Return of the WIZard – CVE-2019-10149)
2019-06-14 22:27:14
cisa
cisa
NSA Releases Advisory on Sandworm Actors Exploiting an Exim Vulnerability
2020-05-28 00:00:00
Exim Releases Security Patches
2019-06-13 00:00:00
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00
alpinelinux
alpinelinux
CVE-2019-10149
2019-06-05 14:29:11
nvd
nvd
CVE-2019-10149
2019-06-05 14:29:11
redhatcve
redhatcve
CVE-2019-10149
2019-06-04 12:51:00
prion
prion
Input validation
2019-06-05 14:29:00
threatpost
threatpost
Microsoft Pushes Azure Users to Patch Linux Systems
2019-06-17 15:02:52
Millions of Linux Servers Under Worm Attack Via Exim Flaw
2019-06-14 14:04:30
NSA Warns of Sandworm Backdoor Attacks on Mail Servers
2020-05-29 16:34:38
exploitdb
exploitdb
Exim 4.87 - 4.91 - Local Privilege Escalation
2019-06-17 00:00:00
Exim 4.87 / 4.91 - Local Privilege Escalation (Metasploit)
2019-08-26 00:00:00
Exim 4.87 < 4.91 - (Local / Remote) Command Execution
2019-06-05 00:00:00
thn
thn
Exim TLS Flaw Opens Email Servers to Remote 'Root' Code Execution Attacks
2019-09-06 12:48:00
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
securelist
securelist
APT trends report Q2 2020
2020-07-29 10:00:09
IT threat evolution Q2 2019. Statistics
2019-08-19 10:00:00
