Exim Remote Code Execution Vulnerability (CVS 2023-42115) Notification

Overview Recently, NSFOCUS CERT detected an Exim remote code execution vulnerability (CVE-2023-42115). When external authentication is enabled, due to improper user input verification, an unauthenticated attacker can remotely exploit this vulnerability by writing data beyond the bounds, ultimately executing arbitrary code on the target server. At present, the details of the vulnerability have been disclosed. […]

The post Exim Remote Code Execution Vulnerability (CVS 2023-42115) Notification appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises …

arbitrary code attacker authentication beyond blog cert code code execution cve cve-2023-42115 cvs data emergency-response exim exploit external input notification remote code remote code execution server target ultimately unauthenticated verification vulnerability writing