CVE-2001-0690: Conectiva Linux

High severity, CVSS 7.5. EPSS: 11.9% chance of exploitation in the next 30 days.

Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.

Affected products

• Conectiva Linux: any version
• Debian Debian Linux: version 4.0 only
• Red Hat Linux: any version
• University Of Cambridge Exim: up to and including 3.22

Published 2001-09-20. Last modified 2026-06-16.