CVE-2005-0021: Buffer Overflow
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dnsbuildreverse function.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0021?
CVE-2005-0021 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2005-0021?
To fix CVE-2005-0021, upgrade Exim to version 4.43 or later, as this version addresses the buffer overflow vulnerabilities.
What versions of Exim are affected by CVE-2005-0021?
CVE-2005-0021 affects Exim versions prior to 4.43, specifically 4.40 and any version between 4.41 and 4.42.
What can an attacker do with CVE-2005-0021?
An attacker can exploit CVE-2005-0021 to execute arbitrary code on the vulnerable Exim server.
Is there a workaround for CVE-2005-0021?
As of the information available, the best course of action is to update Exim to a patched version since no effective workaround is recommended.