Hot answers tagged


This is what we have at work for people that haven't updated exim. It's more specific to match ${run{...}} string. Also a script here to locally check if your server is vulnerable, exim-cve-2019-10149 If acl_smtp_rcpt is not already set to acl_check_rcpt (possibly via MAIN_ACL_CHECK_RCPT), change acl_smtp_rcpt = acl_smtp_rcpt to acl_smtp_rcpt = ...

Only top voted, non community-wiki answers of a minimum length are eligible