TLDR InfoSec · ATTACKS & VULNERABILITIES

MILLIONS OF EXIM MAIL SERVERS EXPOSED TO ZERO-DAY RCE ATTACKS

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

A zero-day vulnerability in all versions of Exim mail transfer agent allows unauthenticated attackers to gain remote code execution on Internet-exposed servers. The vulnerability is due to an Out-of-bounds Write weakness found in the SMTP service, which can lead to software crashes or corruption of data following successful exploitation.