CVE-2001-0690

Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.

Affected products

Exim

University Of Cambridge Exim

≤ 3.22

Conectiva Linux

All versions

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

11.9% (96th percentile)

NVD status

Modified

Published

2002-03-09