onyx --cves cve-2005-0021
CVE-2005-0021
- score
- <0.1
- cvss
- 7.2
- epss
- 2.6%
- published
- 2005-05-02
- kev added
- —
- first seen
Exim before 4.43 contains multiple buffer overflows caused by handling IPv6 addresses with more than 8 components and DNS PTR lookups, letting attackers execute arbitrary code, exploit requires sending crafted IPv6 addresses or DNS queries.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.
Weaknesses
NVD-CWE-Other
References 10
- http://www.debian.org/security/2005/dsa-635
- http://www.debian.org/security/2005/dsa-637
- http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities
- http://www.kb.cert.org/vuls/id/132992
- http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44
- http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347
- http://security.gentoo.org/glsa/glsa-200501-23.xml
- http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities
- http://www.redhat.com/support/errata/RHSA-2005-025.html