Language:
https://lists.debian.org/debian-lts-announce/2021/05/msg00004.html
https://packages.debian.org/source/stretch/exim4
https://security-tracker.debian.org/tracker/source-package/exim4
Severity: Critical
ID: 149345
File Name: debian_DLA-2650.nasl
Version: 1.6
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 5/7/2021
Updated: 9/6/2022
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Nessus Agent
Risk Factor: High
Score: 7.4
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2020-28026
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CPE: p-cpe:/a:debian:debian_linux:exim4, p-cpe:/a:debian:debian_linux:exim4-base, p-cpe:/a:debian:debian_linux:exim4-config, p-cpe:/a:debian:debian_linux:exim4-daemon-heavy, p-cpe:/a:debian:debian_linux:exim4-daemon-heavy-dbg, p-cpe:/a:debian:debian_linux:exim4-daemon-light, p-cpe:/a:debian:debian_linux:exim4-daemon-light-dbg, p-cpe:/a:debian:debian_linux:exim4-dbg, p-cpe:/a:debian:debian_linux:exim4-dev, p-cpe:/a:debian:debian_linux:eximon4, cpe:/o:debian:debian_linux:9.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 5/5/2021
Vulnerability Publication Date: 5/6/2021
CVE: CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014, CVE-2020-28015, CVE-2020-28017, CVE-2020-28019, CVE-2020-28020, CVE-2020-28021, CVE-2020-28022, CVE-2020-28023, CVE-2020-28024, CVE-2020-28025, CVE-2020-28026
IAVA: 2021-A-0216-S