Exim — Vulnerabilities & Security Advisories 18

Exim serves as a widely deployed mail transfer agent for routing and delivering email across networks. Historically, it has been susceptible to remote code execution vulnerabilities, often through buffer overflows or improper input validation, along with cross-site scripting flaws and privilege escalation issues. The software's complex configuration and extensive feature set have contributed to security challenges, with 14 CVEs documented. Notable incidents include critical RCE vulnerabilities in versions 4.87 and 4.92, which allowed attackers to execute arbitrary code with root privileges. Despite these issues, Exim remains a core component in many email infrastructures due to its flexibility and robust routing capabilities.