CVE-2020-28010

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2

Description The issue is related to an out-of-bounds write in the main function of Exim, which can occur when the function, running with setuid root privileges, copies the current working directory pathname into a buffer that is too small on some common platforms. This can potentially allow an attacker to elevate privileges in the system and execute arbitrary code.

Recommendations For versions prior to 4.94.2, update to version 4.94.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the main() function in Exim until a patch is applied.