Exim is a Mail Transport Agent designed with security in mind. It is freely avaiable, open source, and distributed by the University of Cambridge. When Exim receives a mail, it processes the mail by it's localhost and domain name. In the event that the mail contains a pipe (|) symbol as the first part of it's host name, Exim attempts to interpret the localhost name as a command. This could result in a mail with a maliciously crafted From: field being used to execute a command contained within the localhost name of the mailing host. This problem only affects configurations that routes or directs mail without performing any type of check on the local part of the address, and does not affect alias or forward files.
Exim is a Mail Transport Agent designed with security in mind. It is freely avaiable, open source, and distributed by the University of Cambridge. When Exim receives a mail, it processes the mail by it's localhost and domain name. In the event that the mail contains a pipe (|) symbol as the first part of it's host name, Exim attempts to interpret the localhost name as a command. This could result in a mail with a maliciously crafted From: field being used to execute a command contained within the localhost name of the mailing host. This problem only affects configurations that routes or directs mail without performing any type of check on the local part of the address, and does not affect alias or forward files.