CVE-2002-1381: University Of Cambridge Exim

High severity, CVSS 7.2. EPSS: 2.3% chance of exploitation in the next 30 days.

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.

Affected products

• University Of Cambridge Exim: version 3.35 only; version 3.36 only; version 4.10 only

Published 2002-12-23. Last modified 2026-06-16.