CVE-2001-0889: High severity University Of Cambridge Exim vulnerability
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0889?
The severity of CVE-2001-0889 is classified as moderate due to its potential to allow arbitrary command execution.
How do I fix CVE-2001-0889?
To fix CVE-2001-0889, upgrade Exim to version 3.22 or later to ensure proper verification of local parts of address in configurations.
What systems are affected by CVE-2001-0889?
CVE-2001-0889 affects Exim versions 3.22 and earlier, as well as certain Red Hat Linux configurations.
Is CVE-2001-0889 a remote code execution vulnerability?
Yes, CVE-2001-0889 can be exploited by remote attackers to execute arbitrary commands due to insufficient input validation.
What type of vulnerability is CVE-2001-0889?
CVE-2001-0889 is an input validation vulnerability that allows for shell metacharacters to be executed through email address redirection.