CVE-2005-0022: Buffer Overflow
Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0022?
CVE-2005-0022 has been classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2005-0022?
To fix CVE-2005-0022, you should update Exim to version 4.43 or later, which includes patches for this vulnerability.
Which versions of Exim are affected by CVE-2005-0022?
CVE-2005-0022 affects Exim versions prior to 4.43, specifically versions 4.40 and earlier, as well as versions 4.41 and 4.42.
What kind of attack can exploit CVE-2005-0022?
CVE-2005-0022 can be exploited through a buffer overflow attack during SPA authentication, allowing attackers to execute arbitrary code.
Who developed the Exim software affected by CVE-2005-0022?
Exim is developed by the University of Cambridge, which is responsible for addressing vulnerabilities like CVE-2005-0022.