University Of Cambridge » Exim : Security Vulnerabilities, CVEs, Published In 2001 (Code Execution)

Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.