CVE-2020-28008

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2

Description The issue is related to privilege management errors in the Exim message relay agent. Exploitation of this issue may allow an attacker to elevate their privileges in the system. Specifically, because Exim operates as root in the spool directory, an attacker can write to a spool header file, potentially leading to command execution through a crafted recipient address.

Recommendations For Exim versions prior to 4.94.2, update to version 4.94.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the spool directory to minimize the risk of exploitation.