CVE-2004-0399
NoneCVSS
—
EPSS
20.5%
Published
Jul 7, 2004
CISA due date
—
The record
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | exim4 | 0 | 4.33-1 |
| Debian:12 | exim4 | 0 | 4.33-1 |
| Debian:13 | exim4 | 0 | 4.33-1 |
| Debian:3.0 | exim | 0 | 3.35-1woody3 |
| Debian:3.0 | exim-tls | 0 | 3.35-3woody2 |
Related vulnerabilities
- CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. Also affects exim4
- CVE-2017-16944 The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows… Also affects exim4
- CVE-2017-16943 The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows… Also affects exim4
- CVE-2010-4344 Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70… Also affects exim4
- CVE-2010-4345 Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of… Also affects exim4
- CVE-2025-26794 Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote… Also affects exim4