Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fndg-t3tw-mqef
SummaryFormat string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value.
Aliases
0
alias CVE-2002-1381
Fixed_packages
0
url pkg:deb/debian/exim4@4.11-0.0.1?distro=trixie
purl pkg:deb/debian/exim4@4.11-0.0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/exim4@4.11-0.0.1%3Fdistro=trixie
1
url pkg:deb/debian/exim4@4.94.2-7%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/exim4@4.94.2-7%2Bdeb11u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/exim4@4.94.2-7%252Bdeb11u3%3Fdistro=trixie
2
url pkg:deb/debian/exim4@4.96-15%2Bdeb12u7?distro=trixie
purl pkg:deb/debian/exim4@4.96-15%2Bdeb12u7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/exim4@4.96-15%252Bdeb12u7%3Fdistro=trixie
3
url pkg:deb/debian/exim4@4.98.2-1?distro=trixie
purl pkg:deb/debian/exim4@4.98.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/exim4@4.98.2-1%3Fdistro=trixie
4
url pkg:deb/debian/exim4@4.99.1-1?distro=trixie
purl pkg:deb/debian/exim4@4.99.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/exim4@4.99.1-1%3Fdistro=trixie
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-1381
reference_id
reference_type
scores
0
value 0.03052
scoring_system epss
scoring_elements 0.86634
published_at 2026-04-01T12:55:00Z
1
value 0.03052
scoring_system epss
scoring_elements 0.86645
published_at 2026-04-02T12:55:00Z
2
value 0.03052
scoring_system epss
scoring_elements 0.86665
published_at 2026-04-04T12:55:00Z
3
value 0.03052
scoring_system epss
scoring_elements 0.86664
published_at 2026-04-07T12:55:00Z
4
value 0.03052
scoring_system epss
scoring_elements 0.86683
published_at 2026-04-08T12:55:00Z
5
value 0.03052
scoring_system epss
scoring_elements 0.86692
published_at 2026-04-09T12:55:00Z
6
value 0.03052
scoring_system epss
scoring_elements 0.86706
published_at 2026-04-11T12:55:00Z
7
value 0.03052
scoring_system epss
scoring_elements 0.86703
published_at 2026-04-12T12:55:00Z
8
value 0.03052
scoring_system epss
scoring_elements 0.86696
published_at 2026-04-13T12:55:00Z
9
value 0.03052
scoring_system epss
scoring_elements 0.86709
published_at 2026-04-21T12:55:00Z
10
value 0.03052
scoring_system epss
scoring_elements 0.86715
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-1381
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1381
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1381
2
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/22066.c
reference_id CVE-2002-1381;OSVDB-10360
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/22066.c
3
reference_url https://www.securityfocus.com/bid/6314/info
reference_id CVE-2002-1381;OSVDB-10360
reference_type exploit
scores
url https://www.securityfocus.com/bid/6314/info
Weaknesses
Exploits
0
date_added 2002-12-04
description Exim Internet Mailer 3.35/3.36/4.10 - Format String
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2002-12-04
exploit_type local
platform linux
source_date_updated 2012-10-18
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/6314/info
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fndg-t3tw-mqef