Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories
  3. Alerts
  4. Critical Vulnerability in Exim Mail Server (CVE-2019-10149)
Alerts

Critical Vulnerability in Exim Mail Server (CVE-2019-10149)

10 June 2020

The developer of the Exim Mail Server has recently released patches to address a critical vulnerability (CVE-2019-10149).

There are reports of active exploitation of this vulnerability in the wild. All Exim Mail Servers, between and including versions 4.87 to 4.91, are affected. Successful exploitation could lead to a full compromise of the Exim Mail Server. An attacker can take control of an affected email server and perform malicious activity through the mail server.

Administrators managing Internet facing Exim Mail Server should update to the latest version 4.94 immediately.

Back to top