CVE-2005-0022

score

<0.1

cvss

4.6

epss

0.7%

published

2005-05-02

kev added

—

first seen

2026-10-21

Exim before 4.43 contains a buffer overflow caused by the spa_base64_to_bits function, which is called by auth_spa_client, letting attackers execute arbitrary code during SPA authentication, exploit requires sending crafted input.