mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-02 03:41:53 +02:00
748 B
748 B
CVE-2020-28021
Description
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.
POC
Reference
Github
No PoCs found on GitHub currently.