CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via ...
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
- Record
CVE-2005-0021- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
- Record
CVE-2005-0021- Updated
- 2026-11-02
EUVDEUVD-2005-0022 No score
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
- Record
EUVD-2005-0022- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4wq7-f94f-64w2 No score
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via ...
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
- Record
GHSA-4wq7-f94f-64w2- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
- Record
CVE-2005-0021- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0021 No score
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
- Record
DEBIAN-CVE-2005-0021- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exim4Debian:12 |
before 4.34-10 | 4.34-10 |
exim4Debian:13 |
before 4.34-10 | 4.34-10 |
exim4Debian:14 |
before 4.34-10 | 4.34-10 |
eximDebian:3.0 |
before 3.35-1woody4, plus listed versions 3.35-1woody3 |
3.35-1woody4 |
exim-tlsDebian:3.0 |
before 3.35-3woody3, plus listed versions 3.35-3woody1 |
3.35-3woody3 |
eximRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-docRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-monRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-saRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eximRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-docRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-monRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-saRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
eximRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-docRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-monRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-saRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
eximRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-docRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-monRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
exim-saRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.43-1.RHEL4.3 | 0:4.43-1.RHEL4.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Exim 4.41 - 'dns_build_reverse' Local Buffer Overflow | 2005-01-15 |
| Exploit-DB | Exim 4.41 - 'dns_build_reverse' Local Read Emails | 2005-05-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0021 is a high vulnerability (CVSS 7.2) in University Of Cambridge Exim, published January 6, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. Fixed in exim4 4.34-10.
References
idefense.com/application/poi/display?id=179&type=vulnerabilities
kb.cert.org/vuls/id/132992
debian.org/security/2005/dsa-635
ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44
Show 18 moreShow less
redhat.com/support/errata/RHSA-2005-025.html
security.gentoo.org/glsa/glsa-200501-23.xml
exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347
nvd.nist.gov/vuln/detail/CVE-2005-0021
github.com/advisories/GHSA-4wq7-f94f-64w2
security-tracker.debian.org/tracker/CVE-2005-0021
access.redhat.com/errata/RHSA-2005:025
bugzilla.redhat.com/show_bug.cgi?id=144099
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_025.json
cve.org/CVERecord?id=CVE-2005-0021