GSD-2019-10149

Risk Scores

Affected Products

Exploit Intelligence

• SNP Assignment on a Linux vulnerability (github-poc-repo)
• CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. (github-poc-repo)
• Exploit for CVE-2019-10149 (github-poc-repo)
• rahmadsandy/EXIM-4.87-CVE-2019-10149 (github-poc-repo)
• Instructions for installing a vulnerable version of Exim and its expluatation (github-poc-repo)
• CVE-2019-10149 (github-poc-repo)
• test POC for CVE-2019-10149 (github-poc-repo)
• Data Collection Related to Exim CVE-2019-10149 (github-poc-repo)
• PoC for exploitation of vulnerability CVE-2019-10149 (github-poc-repo)
• CybersRMUTL/CVE-2019-10149-Exim4-RCE (github-poc-repo)

…and 70 more exploits

Timeline

• Jun 4, 2019 CVE Published
• Jun 10, 2019 PoC Published
• Jun 13, 2019 PoC Published
• Jun 17, 2019 PoC Published
• Aug 23, 2019 PoC Published
• Aug 26, 2019 PoC Published
• May 28, 2020 PoC Published
• May 29, 2020 PoC Published
• Jun 16, 2020 PoC Published
• Oct 9, 2020 PoC Published
• Oct 22, 2020 PoC Published
• Oct 22, 2020 PoC Published

References

• [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list
• [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list
• [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list
• 20190605 [SECURITY] [DSA 4456-1] exim4 security update mailing-list
• [oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list
• 108679 vdb
• openSUSE-SU-2019:1524 vendor-advisory
• 20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) mailing-list
• [oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 mailing-list
• [oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 mailing-list
• [oss-security] 20190726 Re: Statistics for distros lists updated for 2019Q2 mailing-list
• [oss-security] 20210504 21Nails: Multiple vulnerabilities in Exim mailing-list
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10149 url
• https://www.exim.org/static/doc/security/CVE-2019-10149.txt url
• USN-4010-1 advisory
• DSA-4456 advisory
• GLSA-201906-01 advisory
• http://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html exploit
• http://packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege-Escalation.html exploit
• http://packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege-Escalation.html exploit

…and 1 more