---

CVE-2019-10149 - log back

CVE-2019-10149 created at 25 Sep 2019 19:31:40
Severity	+ Critical
Remote	+ Remote
Type	+ Arbitrary code execution
Description	+ A flaw was found in the way exim validated recipient addresses. A remote attacker could use this flaw to execute arbitrary commands on the exim server with the permissions of the user running the application.
References	+ https://www.exim.org/static/doc/security/CVE-2019-10149.txt + https://www.openwall.com/lists/oss-security/2019/06/06/1 + https://www.openwall.com/lists/oss-security/2019/06/05/4 + https://www.openwall.com/lists/oss-security/2019/06/05/3 + https://www.openwall.com/lists/oss-security/2019/06/05/2
Notes