Unrated severityNVD Advisory· Published Jul 7, 2004· Updated Apr 16, 2026
CVE-2004-0399
CVE-2004-0399
Description
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
Affected products
2cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*
- cpe:2.3:a:university_of_cambridge:exim:3.35:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.debian.org/security/2004/dsa-501nvdPatchVendor Advisory
- www.debian.org/security/2004/dsa-502nvdPatchVendor Advisory
- www.guninski.com/exim1.htmlnvdExploitPatchVendor Advisory
- lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.htmlnvd
- secunia.com/advisories/11558nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16079nvd
News mentions
0No linked articles in our index yet.