Vulnerable: version 3.36nb24 is affected by 20 known vulnerabilities. See below.
mail/exim3 3.36nb24 NetBSD
The Exim mail transfer agent, a replacement for sendmail
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Categories
- mail, net
- Package size
- 288.1 KiB, 901.4 KiB installed
Description
Exim is a mail transport agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more extensive, and in particular it has options for verifying incoming sender and recipient addresses, for refusing mail from specified hosts, networks, or senders, and for controlling mail relaying.
In the other systems
Install
Binary package:
pkgin install exim
From pkgsrc:
cd /usr/pkgsrc/mail/exim3 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 3.36nb24 |
| NetBSD 10.1 aarch64 | 3.36nb24 |
| SmartOS / illumos x86_64 | - |
| macOS 15 arm64 | - |
Dependencies
Run dependencies 2
No port depends on this one.
Known vulnerabilities 20
- exim: privilege-escalation
- exim: local-privilege-escalation
- exim: privilege-escalation (CVE-2010-4345)
- exim: remote-system-access (CVE-2011-1407)
- exim: remote-system-access (CVE-2011-1764)
- exim: buffer-overflow (CVE-2012-5671)
- exim: information-leak (CVE-2016-9963)
- exim: input-validation
- exim: privilege-escalation (CVE-2016-1531)
- exim: arbitrary-code-execution (CVE-2017-1000369)
- exim: use-after-free (CVE-2017-16943)
- exim: denial-of-service (CVE-2017-16944)
- exim: remote-code-execution (CVE-2019-15846)
- exim: out-of-bounds-read (CVE-2020-12783)
- exim: use-after-free (CVE-2022-3559)
- exim: use-after-free (CVE-2022-3620)
- exim: sensitive-information-disclosure (CVE-2023-42114)
- exim: remote-code-execution (CVE-2023-42115)
- exim: remote-code-execution (CVE-2023-42116)
- exim: remote-code-execution (CVE-2023-42117)