CVE-2004-0399: University Of Cambridge Exim

High severity, CVSS 7.5. EPSS: 20.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.

Affected products

• University Of Cambridge Exim: any version; version 3.35 only

Published 2004-07-07. Last modified 2026-06-16.