CVE-2003-0743
- State
- Published
- Severity
- Not scored
- Published
- Sep 6, 2003
- Updated
- Aug 8, 2024
- Reserved
- Sep 4, 2003
Description
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-376vendor-advisory
- CLA-2003:735vendor-advisory
- [Exim] 20030814 Minor security bugmailing-list
- http://www.exim.org/pipermail/exim-announce/2003q3/000094.html
- 20030901 exim remote heap overflow, probably not exploitablemailing-list
- 20030903 Re: exim remote heap overflow, probably not exploitablemailing-list
- [Exim] 20030815 Minor security bugmailing-list
- http://packages.debian.org/changelogs/pool/main/e/exim/exim_3.36-13/changelog
- http://packages.debian.org/changelogs/pool/main/e/exim4/exim4_4.34-10/changelog
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.