CVE-2020-28012

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2

Description The issue is related to a security mechanism flaw in the Exim message transfer agent. It allows exposure of a file descriptor to an unintended control sphere due to a privileged pipe lacking a close-on-exec flag in the rda interpret function. This could potentially enable an attacker to elevate privileges.

Recommendations For Exim versions prior to 4.94.2, update to version 4.94.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the rda interpret function until a patch is available.