CVE-2001-0889

score

<0.1

cvss

7.5

epss

6.4%

published

2001-12-19

kev added

—

first seen

2026-10-21

Exim 3.22 and earlier in some configurations contains a command injection caused by improper verification of the local part of an address when redirecting to a pipe, letting remote attackers execute arbitrary commands via shell metacharacters, exploit requires sending crafted email addresses.