University of Cambridge Exim 4.70
Approved changes feed: RSS · Atom
cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*
part: a version: 4.70 update: *
| Vendor | Exim (394124fe-277b-5eb8-afc3-b5c498937ef9) |
|---|---|
| Product | Exim (6f9e18d0-ac4f-5006-8db5-7919fb601764) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/exim4 |
purl2cpe | 2026-06-01 10:18:20.279763 |
pkg:deb/ubuntu/exim4 |
purl2cpe | 2026-06-01 10:18:20.279765 |
pkg:exim/exim |
purl2cpe | 2026-06-01 10:18:20.279766 |
pkg:github/exim/exim |
purl2cpe | 2026-06-01 10:18:20.279768 |
pkg:rpm/fedora/exim |
purl2cpe | 2026-06-01 10:18:20.279770 |
pkg:rpm/opensuse/exim |
purl2cpe | 2026-06-01 10:18:20.279771 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-2972 |
vulnerable | 2026-06-08 05:05:30.572556 |
Details available
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.
Published: 2014-09-04T17:00:00.000Z
Updated: 2024-08-06T10:28:46.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2957 |
vulnerable | 2026-06-08 05:05:30.537016 |
Details available
The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.
Published: 2014-09-04T17:00:00.000Z
Updated: 2024-08-06T10:28:46.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5671 |
vulnerable | 2026-06-08 05:02:57.990142 |
Details available
Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to "warn control = dkim_disable_verify," allows remote attackers to execute arbitrary code via an email from a malicious DNS server.
Published: 2012-10-31T16:00:00.000Z
Updated: 2024-08-06T21:14:16.438Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1764 |
vulnerable | 2026-06-08 04:58:01.988186 |
Details available
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.
Published: 2011-10-05T01:00:00.000Z
Updated: 2024-08-06T22:37:25.837Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1407 |
vulnerable | 2026-06-08 04:57:59.053671 |
Details available
The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.
Published: 2011-05-16T18:00:00.000Z
Updated: 2024-08-06T22:28:40.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0017 |
vulnerable | 2026-06-08 04:56:33.412026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2024 |
vulnerable | 2026-06-08 04:54:11.299671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2023 |
vulnerable | 2026-06-08 04:54:11.298218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.