CVE

Id
7567  
CVE No.
CVE-2003-0743  
Status
Candidate  
Description
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.  
Phase
Assigned (20030904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44504 7567 CVE-2003-0743 BUGTRAQ:20030901 exim remote heap overflow, probably not exploitable  View
44505 7567 CVE-2003-0743 URL:http://marc.info/?l=bugtraq&m=106252015820395&w=2  View
44506 7567 CVE-2003-0743 VULN-DEV:20030903 Re: exim remote heap overflow, probably not exploitable  View
44507 7567 CVE-2003-0743 URL:http://marc.info/?l=vuln-dev&m=106264740820334&w=2  View
44508 7567 CVE-2003-0743 MLIST:[Exim] 20030814 Minor security bug  View
44509 7567 CVE-2003-0743 URL:http://www.exim.org/pipermail/exim-users/Week-of-Mon-20030811/057720.html  View
44510 7567 CVE-2003-0743 MLIST:[Exim] 20030815 Minor security bug  View
44511 7567 CVE-2003-0743 URL:http://www.exim.org/pipermail/exim-users/Week-of-Mon-20030811/057809.html  View
44512 7567 CVE-2003-0743 CONFIRM:http://packages.debian.org/changelogs/pool/main/e/exim/exim_3.36-13/changelog  View
44513 7567 CVE-2003-0743 CONFIRM:http://packages.debian.org/changelogs/pool/main/e/exim4/exim4_4.34-10/changelog  View
44514 7567 CVE-2003-0743 CONFIRM:http://www.exim.org/pipermail/exim-announce/2003q3/000094.html  View
44515 7567 CVE-2003-0743 DEBIAN:DSA-376  View
44516 7567 CVE-2003-0743 URL:http://www.debian.org/security/2003/dsa-376  View
44517 7567 CVE-2003-0743 CONECTIVA:CLA-2003:735  View

Related JVN