Situation
A critical vulnerability was found on Linux Exim mail transport agent (MTA) versions 4.87 to 4.91.
Problem
The vulnerability found on Exim, allows for improper validation of the recipient address, which may lead to remote command execution.
Implication
Successful exploitation of this vulnerability can allow an attacker to perform command executions as root. The attacker can then install programs; view, change, or delete data; or create new accounts with full user rights.
Need
This vulnerability has been patched. All Exim mail transport agents should be patched to version 4.92 or higher to protect against this vulnerability.
Learn More
https://nvd.nist.gov/vuln/detail/CVE-2019-10149