Export-Import Bank of the United States

Known Exploited Vulnerabilities 5CVEs

1 linked to ransomware campaigns

• CVE-2010-4345EximMar 25, 202218.1% EPSS

  Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

• CVE-2010-4344EximMar 25, 202271.9% EPSS

  Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.

• CVE-2019-16928Exim Internet MailerMar 3, 202241.6% EPSS

  Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.

• CVE-2019-10149Mail Transfer Agent (MTA)Jan 10, 2022100.0% EPSS

  Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

• CVE-2018-6789EximNov 3, 202182.1% EPSS

  Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.