Three critical vulnerabilities in Exim allow for remote code execution on the server.
The Zero Day Initiative (ZDI) has revealed details about unpatched (0-day) vulnerabilities (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) in the Exim mail server, allowing for remote code execution on a server with the privileges of the process accepting connections on network port 25. No authentication is required for the attack. The first vulnerability (CVE-2023-42115) is caused by an error in the SMTP service and is related to the lack of proper data checks, […]
