CVE-2004-0399: Buffer Overflow
Published May 12, 2004
·Updated
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the senderverify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
Affected Software
2 affected components
University Of Cambridge Exim
University Of Cambridge Exim=3.35
Remediation
Patch Available
Patch Available
Patch Available
Event History
May 12, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0399?
CVE-2004-0399 has a high severity rating due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2004-0399?
To fix CVE-2004-0399, upgrade to Exim version 4 or later and disable the sender_verify option if possible.
3
Which versions of Exim are affected by CVE-2004-0399?
CVE-2004-0399 affects Exim 3.35 and earlier versions.
4
What type of vulnerability is CVE-2004-0399?
CVE-2004-0399 is a stack-based buffer overflow vulnerability.
5
Can CVE-2004-0399 be exploited remotely?
Yes, CVE-2004-0399 can be exploited remotely during sender verification.