Lucene search

K
cve[email protected]CVE-2004-0399
HistoryJul 07, 2004 - 4:00 a.m.

CVE-2004-0399

2004-07-0704:00:00
web.nvd.nist.gov
29
exim
stack-based buffer overflow
cve-2004-0399
sender verification
denial of service
remote attackers
arbitrary code

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.422 Medium

EPSS

Percentile

97.3%

Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.

Affected configurations

NVD
Node
university_of_cambridgeexim
OR
university_of_cambridgeeximMatch3.35

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.422 Medium

EPSS

Percentile

97.3%