Description
Exim存在代码执行漏洞。此漏洞是由于对接收的AUTH字段缺乏校验导致的。
Exim CVE-2023-42115 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-42115
https://www.secrss.com/articles/59474
https://blog.nsfocus.net/eximcve-2023-42115/
https://www.h3c.com/cn/d_202310/1949403_30003_0.htm
https://avd.aliyun.com/detail?id=AVD-2023-42115
https://www.venustech.com.cn/new_type/aqtg/20231009/26330.html
https://arcticwolf.com/resources/blog/cve-2023-42115/
https://www.twingate.com/blog/tips/cve-2023-42115
https://forum.hestiacp.com/t/cve-2023-42115-exim-vulnerability-cvss-score-9-8/11215
https://sara-open.sirp.io/cve/CVE-2023-42115
https://forum.directadmin.com/threads/exim-rce-vulnerability-cve-2023-42115.69200/
https://www.wiz.io/blog/exim-zero-day-vulnerabilities
https://github.com/doaso/CVE-2023-42115