NVD

Id
73848  
Name
CVE-2003-0743  
Description
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-10-20  
Modified Date
2016-10-17  
Seq
2003-0743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379746 73848 CVE-2003-0743 CLA-2003:735  View
379747 73848 CVE-2003-0743 20030901 exim remote heap overflow, probably not exploitable  View
379748 73848 CVE-2003-0743 20030903 Re: exim remote heap overflow, probably not exploitable  View
379749 73848 CVE-2003-0743 http://packages.debian.org/changelogs/pool/main/e/exim/exim_3.36-13/changelog  View
379750 73848 CVE-2003-0743 http://packages.debian.org/changelogs/pool/main/e/exim4/exim4_4.34-10/changelog  View
379751 73848 CVE-2003-0743 DSA-376  View
379752 73848 CVE-2003-0743 http://www.exim.org/pipermail/exim-announce/2003q3/000094.html  View
379753 73848 CVE-2003-0743 [Exim] 20030814 Minor security bug  View
379754 73848 CVE-2003-0743 [Exim] 20030815 Minor security bug  View

Related JVN