Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Exim畸形EHLO/HELO命令远程堆破坏漏洞
Vulnerability Description
Exim[1]是一款流行的EMAIL服务器(MTA)。 Exim没有正确处理畸形EHLO/HELO消息，远程攻击者可以利用这个漏洞对Exim服务器进行基于堆的破坏，可导致拒绝服务攻击。 问题存在于exim-4.20/src/smtp_in.c中： if (*smtp_data == 0) Ustrcpy(smtp_data， "(no argument given)"); 'smtp_data'是指向513字节的'cmd_buffer'堆缓冲区。精心构建HELO或者EHLO命令可以使'*smtp_data
CVSS Information
N/A
Vulnerability Type
N/A