← Vulnerability feed

Vulnerability record · CVE-2002-1381 · published 23 December 2002

CVE-2002-1381: University of cambridge exim vulnerability

University Of Cambridge · Exim

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.

7.2 CVSS 2.0 High EPSS 2.3% · top 17.4%
7.2CVSS 2.0 base score
2.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://groups.yahoo.com/group/exim-users/message/42358 ExploitPatchVendor Advisory
http://marc.info/?l=bugtraq&m=103903403527788&w=2
http://marc.info/?l=bugtraq&m=104006219018664&w=2
http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
http://www.securityfocus.com/bid/6314
https://exchange.xforce.ibmcloud.com/vulnerabilities/10761
http://groups.yahoo.com/group/exim-users/message/42358 ExploitPatchVendor Advisory
http://marc.info/?l=bugtraq&m=103903403527788&w=2
http://marc.info/?l=bugtraq&m=104006219018664&w=2
http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
http://www.securityfocus.com/bid/6314
https://exchange.xforce.ibmcloud.com/vulnerabilities/10761

Track CVE-2002-1381 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0399University of cambridge exim vulnerabilityStack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a deni…EPSS 21%7.5CVE-2004-0400University of cambridge exim vulnerabilityStack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of serv…EPSS 7.0%7.5CVE-2003-0743University of cambridge exim vulnerabilityHeap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary…EPSS 5.7%7.5CVE-2001-0889University of cambridge exim vulnerabilityExim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which co…EPSS 6.4%7.5CVE-2001-0690University of cambridge exim vulnerabilityFormat string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execu…EPSS 12%7.2CVE-2005-0021University of cambridge exim vulnerabilityMultiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as d…EPSS 2.6%7.2CVE-1999-0971University of cambridge exim vulnerabilityBuffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.EPSS 0.69%4.6CVE-2005-0022University of cambridge exim vulnerabilityBuffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client …EPSS 0.72%

Source: NIST National Vulnerability Database (record CVE-2002-1381), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.