onyx

onyx --cves cve-2001-0690

CVE-2001-0690

HIGHKEVPOCExim
score
<0.1
cvss
7.5
epss
11.9%
published
2001-09-20
kev added
2017-06-20
first seen

Exim 3.22-10 (Red Hat), 3.12 (Debian), 3.16 (Conectiva) contains a format string caused by unsanitized SMTP mail headers in batched SMTP mode, letting remote attackers execute arbitrary code, exploit requires sending crafted mail headers.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2001-09-20 — PublishedP2017-06-20 — Added to CISA KEVK2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoCXscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 11.9%2026-09-23: epss 11.9%2026-09-24: epss 11.9%2026-09-25: epss 11.9%2026-09-26: epss 11.9%2026-09-27: epss 11.9%2026-09-28: epss 11.9%2026-09-29: epss 11.9%2026-09-30: epss 11.9%2026-10-01: epss 11.9%2026-10-02: epss 11.9%2026-10-03: epss 11.9%2026-10-04: epss 11.9%2026-10-05: epss 11.9%2026-10-06: epss 11.9%2026-10-07: epss 11.9%2026-10-08: epss 11.9%2026-10-09: epss 11.9%2026-10-10: epss 11.9%2026-10-11: epss 11.9%2026-10-12: epss 11.9%2026-10-13: epss 11.9%2026-10-14: epss 11.9%2026-10-15: epss 11.9%2026-10-16: epss 11.9%2026-10-18: epss 11.9%2026-10-19: epss 11.9%2026-10-20: epss 11.9%2026-10-21: epss 11.9%11.9%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. Tracked by Onyx
  4. Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

NVD-CWE-Other

References 7