Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exim | University_of_cambridge | * | 3.22 (including) |
| Red Hat Powertools 6.2 | RedHat | * | |
| Red Hat Powertools 7.0 | RedHat | * | |
| Red Hat Powertools 7.1 | RedHat | * |