AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2003-0743

HIGH · CVSS 7.5 EPSS 5.65%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-10-20 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It may be remotely exploitable.

CVE
CVE-2003-0743
Severity
HIGH
CVSS
7.5
EPSS
5.65%

Original NVD Description

Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.