CVE-2004-0400: Buffer Overflow
Published May 12, 2004
·Updated
Stack-based buffer overflow in Exim 4 before 4.33, when the headerschecksyntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.
Affected Software
1 affected component
University Of Cambridge Exim<=4.32
Remediation
Patch Available
Patch Available
Patch Available
Event History
May 12, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0400?
CVE-2004-0400 is considered a high severity vulnerability due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2004-0400?
To fix CVE-2004-0400, upgrade Exim to version 4.33 or later, where the vulnerability has been patched.
3
What versions of Exim are affected by CVE-2004-0400?
Exim versions before 4.33, specifically up to and including 4.32, are affected by CVE-2004-0400.
4
What causes the vulnerability in CVE-2004-0400?
CVE-2004-0400 is caused by a stack-based buffer overflow when the headers_check_syntax option is enabled in Exim.
5
Can CVE-2004-0400 be exploited remotely?
Yes, CVE-2004-0400 can be exploited remotely by attackers sending crafted email headers.