{"id":9389,"date":"2019-10-01T02:59:56","date_gmt":"2019-10-01T02:59:56","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9389"},"modified":"2026-04-17T18:07:51","modified_gmt":"2026-04-17T18:07:51","slug":"exim-remote-code-execution-vulnerability-cve-2019-15846-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/exim-remote-code-execution-vulnerability-cve-2019-15846-threat-alert\/","title":{"rendered":"Exim Remote Code Execution Vulnerability (CVE-2019-15846) Threat Alert"},"content":{"rendered":"


\n<\/p>\n

    \n
  1. \n

    <\/a> Vulnerability Description<\/strong><\/h2>\n<\/li>\n<\/ol>\n

    Recently, Linux’s mail transfer agent Exim was reported to contain a remote code execution vulnerability (CVE-2019-15846). When the Exim server is accepting TLS connections, attackers could exploit this vulnerability to remotely execute arbitrary code with root privileges by sending an SNI ending in a backslash-null sequence. By default, the TLS function is disabled on the Exim server, but many users need to have this function enabled for processing network traffic.<\/p>\n

    Exim is a mail transfer agent (MTA), which is responsible for receiving, routing, and delivering email messages. Exim has been ported to most UNIX-like systems, including Solaris, AIX, and Linux. Since it can be flexibly configured, Exim is often used together with other applications. Currently, the vulnerability’s proof of concept (PoC) has not been made publicly available. Users are advised to upgrade as soon as possible to prevent attacks exploiting this vulnerability.<\/p>\n

    Reference:<\/p>\n

    http:\/\/exim.org\/static\/doc\/security\/CVE-2019-15846.txt<\/a><\/p>\n

      \n
    1. \n

      Scope of Impact<\/strong><\/h2>\n<\/li>\n<\/ol>\n

      Affected Versions<\/strong><\/p>\n