← Vulnerability feed

Vulnerability record · CVE-2004-0399 · published 7 July 2004

CVE-2004-0399: University of cambridge exim vulnerability

University Of Cambridge · Exim

Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.

7.5 CVSS 2.0 High EPSS 21% · top 2.6%
7.5CVSS 2.0 base score
21%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html
http://secunia.com/advisories/11558
http://www.debian.org/security/2004/dsa-501 PatchVendor Advisory
http://www.debian.org/security/2004/dsa-502 PatchVendor Advisory
http://www.guninski.com/exim1.html ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16079
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html
http://secunia.com/advisories/11558
http://www.debian.org/security/2004/dsa-501 PatchVendor Advisory
http://www.debian.org/security/2004/dsa-502 PatchVendor Advisory
http://www.guninski.com/exim1.html ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16079

Track CVE-2004-0399 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0400University of cambridge exim vulnerabilityStack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of serv…EPSS 7.0%7.5CVE-2003-0743University of cambridge exim vulnerabilityHeap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary…EPSS 5.7%7.5CVE-2001-0889University of cambridge exim vulnerabilityExim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which co…EPSS 6.4%7.5CVE-2001-0690University of cambridge exim vulnerabilityFormat string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execu…EPSS 12%7.2CVE-2005-0021University of cambridge exim vulnerabilityMultiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as d…EPSS 2.6%7.2CVE-2002-1381University of cambridge exim vulnerabilityFormat string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code b…EPSS 2.3%7.2CVE-1999-0971University of cambridge exim vulnerabilityBuffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.EPSS 0.69%4.6CVE-2005-0022University of cambridge exim vulnerabilityBuffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client …EPSS 0.72%

Source: NIST National Vulnerability Database (record CVE-2004-0399), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.