## https://sploitus.com/exploit?id=EXIM_EXPANSION_RCE
**Name**| exim_expansion_rce
---|---
**CVE**| CVE-2019-10149
**Exploit Pack**| [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)
**Description**| exim_expansion_rce
**Notes**| CVE Name: CVE-2019-10149
VENDOR: Exim
NOTES: A vulnerability exists in Exim since version 4.85 that allows for the execution
of remote commands as the root user on a system. Current version of the exploit
installs wget if not present and then downloads a CANVAS mosdef callback from
the CANVAS host (must be reachable via HTTP). Webserver will bind on port 80
if CANVAS is run as root
VersionsAffected: Exim 4.85+
Repeatability: Infinite
References: https://www.qualys.com/2019/06/05/cve-2019-10149/return-wizard-rce-exim.txt
CVE Url: https://vulners.com/cve/CVE-2019-10149
Date public: 05/06/2019
CVSS: N/A