CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation
- Published
- Jun 5, 2019
- Updated
- Oct 21, 2025
- Assigning CNA
- redhat
- Evidence observed
- Jun 5, 2019
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 100.0%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
Sources
modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/local/exim4_deliver_message_priv_esc.platform)
- verification: check_declared($.exploit_linux/local/exim4_deliver_message_priv_esc.check)
- exploitsExploit
Public exploit repository covering local privilege escalation, buffer overflows, and database exploits across Linux, Solaris, AIX, OpenBSD, Zyxel, Oracle, and MySQL.
- CVE-2019-10149-Exim4-RCEExploit
Local privilege escalation exploit for Exim 4.87-4.91 (CVE-2019-10149). Delivers a setuid root shell helper via crafted SMTP commands, enabling privilege escalation from standard user to root.
- CVE-2019-10149Exploit
CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
- CVE-2019-10149Exploit
CVE-2019-10149
PoC for CVE-2019-10149, this vulnerability could be xploited betwen 4-87 to 4.91 version of Exim server.
- EXIM-4.87-CVE-2019-10149Research
Educational lab environment for practicing exploitation of CVE-2019-10149 in Exim 4.87, designed for hands-on vulnerability analysis and penetration testing training.
- CVE-2019-10149-quickPatch
Simple Bash shell quick fix CVE-2019-10149
- CVE-2019-10149Exploit
Vulnerability Research and Exploit for CVE-2019-10149
CVE-2019-10149 privilege escalation
- exim-rce-quickfixPatch
quick fix for CVE-2019-10149, works on Debian\Ubuntu\Centos
- exim.expExploit
CVE-2019-10149
- eximrce-CVE-2019-10149Exploit
simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /tmp/eximrce.
- CVE-2019-10149Exploit
Instructions for installing a vulnerable version of Exim and its expluatation
test POC for CVE-2019-10149
- CVE-2019-10149-ExploitExploit
Exploit for CVE-2019-10149
- PoC_CVE-2019-10149--rceExploit
Remote Command Execution into shell from a vulnerable exim service.
- Exim-CVE-2019-10149Exploit
PoC for exploitation of vulnerability CVE-2019-10149
- exploitsExploit
exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House
Qualys Corporation · linux · Jun 5, 2019
Marco Ivaldi · linux · Jun 17, 2019
Metasploit · linux · Aug 26, 2019
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.