Exim Mail Servers Vulnerable to Zero-Day Attacks for Over a Year – A Major Security Concern

Exim's unpatched vulnerability could expose over a million servers to attacks.

A critical flaw in Exim’s mail transfer agent (MTA) software has been discovered, and shockingly, it remained unpatched for more than a year, potentially leaving over a million servers exposed to vulnerabilities.

This security concern came to light thanks to the diligent efforts of researchers from Trend Micro’s Zero Day Initiative. They were alerted to the issue in June of the previous year by an anonymous researcher who had identified an out-of-bounds write weakness within the SMTP service, as reported by BleepingComputer.