CVE-2003-0743

Published: Oct 20, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.

Affected (25)

Products: University Of Cambridge: Exim

University Of Cambridge

1 product

Exim

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
University Of Cambridge Exim	Version 3.0
University Of Cambridge Exim	Version 3.11
University Of Cambridge Exim	Version 3.12
University Of Cambridge Exim	Version 3.13
University Of Cambridge Exim	Version 3.14
University Of Cambridge Exim	Version 3.15
University Of Cambridge Exim	Version 3.16
University Of Cambridge Exim	Version 3.17
University Of Cambridge Exim	Version 3.18
University Of Cambridge Exim	Version 3.19
University Of Cambridge Exim	Version 3.20
University Of Cambridge Exim	Version 3.21
University Of Cambridge Exim	Version 3.22
University Of Cambridge Exim	Version 3.3.1
University Of Cambridge Exim	Version 3.3.2
University Of Cambridge Exim	Version 3.30
University Of Cambridge Exim	Version 3.31
University Of Cambridge Exim	Version 3.32
University Of Cambridge Exim	Version 3.33
University Of Cambridge Exim	Version 3.34
University Of Cambridge Exim	Version 3.35
University Of Cambridge Exim	Version 3.36
University Of Cambridge Exim	Version 3.3
University Of Cambridge Exim	Version 4.10
University Of Cambridge Exim	Version 4.20