CVE-2020-28021

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.
Configurations

Configuration 1

cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*

Information

Published : 2021-05-06 01:15

Updated : 2021-05-10 04:23


NVD link : CVE-2020-28021

Mitre link : CVE-2020-28021

Products Affected
No products.