iDEFENSE Security Advisory IDEF0725 – Local exploitation of a buffer overflow vulnerability in Exim 4.41 may allow execution of arbitrary commands with elevated privileges. The problem specifically exists in the host_aton function. The function fails to check the number of elements it stores in a fixed size array. The elements come from a user-controlled string and are passed into the program from a command line option.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35647/IDEF0725.txt
Source: https://packetstormsecurity.com/files/35647/IDEF0725.txt.html