deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17419
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUTransferHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4230.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-984; https://zerodayinitiative.com/advisories/ZDI-17-984
CVE: CVE-2017-17420
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4231.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-985; https://zerodayinitiative.com/advisories/ZDI-17-985
CVE: CVE-2017-17421
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSelectionSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4232.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-986; https://zerodayinitiative.com/advisories/ZDI-17-986
CVE: CVE-2017-17422
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4233.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-975; https://zerodayinitiative.com/advisories/ZDI-17-975
CVE: CVE-2017-17423
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupSegment Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4234.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-976; https://zerodayinitiative.com/advisories/ZDI-17-976
CVE: CVE-2017-17424
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4235.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-977; https://zerodayinitiative.com/advisories/ZDI-17-977
CVE: CVE-2017-17425
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4237.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-987; https://zerodayinitiative.com/advisories/ZDI-17-987
CVE: CVE-2017-17652
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4238.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-988; https://zerodayinitiative.com/advisories/ZDI-17-988
CVE: CVE-2017-17653
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4286.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-989; https://zerodayinitiative.com/advisories/ZDI-17-989
CVE: CVE-2017-17654
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4287.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-990; https://zerodayinitiative.com/advisories/ZDI-17-990
CVE: CVE-2017-17655
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4289.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-991; https://zerodayinitiative.com/advisories/ZDI-17-991
CVE: CVE-2017-17656
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4292.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-992; https://zerodayinitiative.com/advisories/ZDI-17-992
CVE: CVE-2017-17657
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4294.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-993; https://zerodayinitiative.com/advisories/ZDI-17-993
CVE: CVE-2017-17658
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4316.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-994; https://zerodayinitiative.com/advisories/ZDI-17-994
CVE: CVE-2017-17659
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4906.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-995; https://zerodayinitiative.com/advisories/ZDI-17-995
CVE: CVE-2018-1161
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart request, the process does not properly validate the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-4215.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-20
References: https://zerodayinitiative.com/advisories/ZDI-18-004; https://zerodayinitiative.com/advisories/ZDI-18-004
CVE: CVE-2018-1162
Published: 2018-02-08
Description: This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within the handling of Export requests. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to arbitrarily overwrite files resulting in a denial-of-service condition. Was ZDI-CAN-4222.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://zerodayinitiative.com/advisories/ZDI-18-005; https://zerodayinitiative.com/advisories/ZDI-18-005
CVE: CVE-2018-1163
Published: 2018-02-08
Description: This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13. The specific flaw exists within JSON RPC Request handling. By setting the checksession parameter to a specific value, it is possible to bypass authentication to critical functions. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4752.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://zerodayinitiative.com/advisories/ZDI-18-006; https://zerodayinitiative.com/advisories/ZDI-18-006
CVE: CVE-2018-5550
Published: 2018-02-08
Description: Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/; https://epson.com/support/wa00860; https://blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/
CVE: CVE-2017-6225
Published: 2018-02-08
Description: Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us
CVE: CVE-2017-6227
Published: 2018-02-08
Description: A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router Advertisement (RA) messages to a targeted system.
CVSS Score: 6.5 (MEDIUM)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-526; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-526
CVE: CVE-2011-4889
Published: 2018-02-08
Description: The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 does not properly update passwords on a configuration using Tivoli Directory Server, which might allow remote attackers to gain access to an application by leveraging knowledge of an old password. IBM X-Force ID: 72581.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/72581; https://www-304.ibm.com/support/docview.wss?uid=swg21587015; https://exchange.xforce.ibmcloud.com/vulnerabilities/72581
CVE: CVE-2012-0941
Published: 2018-02-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Endpoint Monitor, (2) Dialup List, or (3) Log&Report Display modules, or the fields_sorted_opt parameter to (4) user/auth/list or (5) endpointcompliance/app_detect/predefined_sig_list.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/109168/VL-144.txt; http://www.securityfocus.com/bid/51708; https://exchange.xforce.ibmcloud.com/vulnerabilities/72761
CVE: CVE-2012-2166
Published: 2018-02-08
Description: IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hardcoded passwords for unspecified accounts, which allows remote attackers to gain user access via unknown vectors. IBM X-Force ID: 75041.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256; https://exchange.xforce.ibmcloud.com/vulnerabilities/75041; http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004256
CVE: CVE-2012-3331
Published: 2018-02-08
Description: IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21613895; https://exchange.xforce.ibmcloud.com/vulnerabilities/78048; http://www-01.ibm.com/support/docview.wss?uid=swg21613895
CVE: CVE-2012-5359
Published: 2018-02-08
Description: Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/VulnerabilityResearchAdvisories/2012/msvr12-017; https://www.ffmpeg.org/security.html; https://docs.microsoft.com/en-us/security-updates/VulnerabilityResearchAdvisories/2012/msvr12-017
CVE: CVE-2012-5360
Published: 2018-02-08
Description: Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/VulnerabilityResearchAdvisories/2012/msvr12-017; https://www.ffmpeg.org/security.html; https://docs.microsoft.com/en-us/security-updates/VulnerabilityResearchAdvisories/2012/msvr12-017
CVE: CVE-2013-2830
Published: 2018-02-08
Description: Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-005; https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-005
CVE: CVE-2013-3552
Published: 2018-02-08
Description: Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-006; https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-006
CVE: CVE-2013-3553
Published: 2018-02-08
Description: Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-007; https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-007
CVE: CVE-2014-4066
Published: 2018-02-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, CVE-2014-2802, and CVE-2014-2806.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037
CVE: CVE-2014-4112
Published: 2018-02-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0304.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-4145
Published: 2018-02-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057, and CVE-2014-8985.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051
CVE: CVE-2014-8985
Published: 2018-02-08
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057, and CVE-2014-4145.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/70937; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051; http://www.securityfocus.com/bid/70937
CVE: CVE-2015-2329
Published: 2018-02-08
Description: Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/zeroday/FG-VD-15-020; https://raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txt; https://fortiguard.com/zeroday/FG-VD-15-020
CVE: CVE-2017-15914
Published: 2018-02-08
Description: Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.
CVSS Score: 8.8 (HIGH)
References: http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27; http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27
CVE: CVE-2018-6180
Published: 2018-02-08
Description: A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/146254/Online-Voting-System-Authentication-Bypass.html; https://www.exploit-db.com/exploits/43967/; http://packetstormsecurity.com/files/146254/Online-Voting-System-Authentication-Bypass.html
CVE: CVE-2018-6644
Published: 2018-02-08
Description: SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2018/02/07/1; http://www.securityfocus.com/bid/103041; http://www.openwall.com/lists/oss-security/2018/02/07/1
CVE: CVE-2018-6789
Published: 2018-02-08
Description: An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: http://openwall.com/lists/oss-security/2018/02/10/2; http://packetstormsecurity.com/files/162959/Exim-base64d-Buffer-Overflow.html; http://www.openwall.com/lists/oss-security/2018/02/07/2