CVE-2005-0021 - CVE House
Back to Database
Status published High CVE-2005-0021

Multiple buffer overflows in Exim before 4.43 may allow attackers...

Vulnerability Description

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0021

Credits & Attribution

No credits recorded in the NVD database.

References

More from university of cambridge

View All →
CVE-2005-0022
Buffer overflow in the spa_base64_to_bits function in Exim before 4.43,...
Medium 4.6
CVE-2004-0400
Stack-based buffer overflow in Exim 4 before 4.33, when the...
High 7.5
CVE-2004-0399
Stack-based buffer overflow in Exim 3.35, and other versions before...
High 7.5
CVE-2003-0743
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before...
High 7.5
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10,...
High 7.2

Affected Vendor

university of cambridge

View all reports →

Affected Software

exim
Vulnerable Versions:
0, 4.41, 4.42

Timeline

Official Publish: January 6th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.