cve/2020/CVE-2020-28013.md

CVE-2020-28013

Description

Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy.

POC

Reference

• https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28013-PFPSN.txt

Github

• https://github.com/ARPSyndicate/cvemon