Exploit for Immunity Canvas: CVE_2010_4344

canvas · 2010-12-14

Description

CVE-2010-4344 exim vulnerabilit

Entry point

ParameterHeaderX · header

Pathwww.h4x.net/shell.txt

Exim 4.x vulnerability exploit uses crafted SMTP headers to trigger remote code execution and fetch a trojan payload via the trojan URL.

Affected Exim versions

Exim< 4.70

All known vulnerabilities by product

CVSS 9.3 for CVE-2010-4344

9.3

HIGH SEVERITY

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Score

71.9%higher than 99.4% of all CVEs

Updated 2026-07-11

Exploit Details

Modified:2010-12-14 16:00

Last Seen:2021-07-28 14:33

Reporter:Immunity Canvas

Tags

immunity canvaseximvulnerabilityexploit packinfiniteCVE-2010-4344

Other exploits for CVE-2010-4344

📄 Qualys Security Advisory - Exim 21Nails Advisory

2026-02-11 Qualys Security AdvisoryPACKETSTORMPerl

Exim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)

2010-12-16 MetasploitEXPLOITDBRuby

Exim 4.63 - Remote Command Execution

2010-12-11 kingcopeEXPLOITDBPerl

Exim 4.63 Remote Root Exploit

2010-12-11 KingcopePACKETSTORMPerl

Exim4 <= 4.69 string_format Function Heap Buffer Overflow

2010-12-11 H D MoorePACKETSTORMRuby

Exploit Code

MARKDOWN12 lines

## https://sploitus.com/exploit?id=CVE_2010_4344
**Name**|  CVE_2010_4344  
---|---  
**CVE**|  CVE-2010-4344  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| CVE-2010-4344  
**Notes**| CVE Name: CVE-2010-4344  
VENDOR: exim  
Repeatability: Infinite  
References: ['http://bugs.exim.org/show_bug.cgi?id=787', 'http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html']  
CVE Url: https://vulners.com/cve/CVE-2010-4344  
Date public: 12/07/2010