VU#672565: Exim servers that accept TLS connections are vulnerable to local and remote program execution with root privileges

Exim is an open source mail server or message transfer agent(MTA)that is used on Unix-like operating systems. Versions up to and including 4.92.1 of Exim are vulnerable to local and report program execution with root privileges. Exim servers that accept TLS connections are vulnerable. This vulnerability is independent of the TLS library,so Exim servers that use either GnuTLS and OpenSSL are affected. The affected versions for the current vulnerability,CVE-2019-15846,are up to and including 4.92.1.

Support the originator by clicking the read the rest link below.