onyx --cves cve-2003-0743
CVE-2003-0743
- score
- <0.1
- cvss
- 7.5
- epss
- 5.7%
- published
- 2003-10-20
- kev added
- —
- first seen
Exim 3 before 3.36 and Exim 4 before 4.21 contain a heap-based buffer overflow caused by untrimmed large HELO or EHLO arguments with spaces, letting remote attackers execute arbitrary code, exploit requires sending crafted HELO/EHLO commands.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
NVD-CWE-Other
References 9
- http://www.exim.org/pipermail/exim-users/Week-of-Mon-20030811/057809.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000735
- http://marc.info/?l=bugtraq&m=106252015820395&w=2
- http://packages.debian.org/changelogs/pool/main/e/exim4/exim4_4.34-10/changelog
- http://www.debian.org/security/2003/dsa-376
- http://marc.info/?l=vuln-dev&m=106264740820334&w=2
- http://packages.debian.org/changelogs/pool/main/e/exim/exim_3.36-13/changelog
- http://www.exim.org/pipermail/exim-announce/2003q3/000094.html
- http://www.exim.org/pipermail/exim-users/Week-of-Mon-20030811/057720.html