cbcvebase.
CVE-2003-0743
published 2003-10-20

CVE-2003-0743: Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via…

PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
5.51%
91.8th percentile
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.

Affected

25 ranges
VendorProductVersion rangeFixed in
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
university_of_cambridgeexim——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.