CVE ID:	CVE-2019-13917
Description:	Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).
Test IDs:	1.3.6.1.4.1.25623.1.0.844110   1.3.6.1.4.1.25623.1.0.704488   1.3.6.1.4.1.25623.1.0.142673
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-13917 Bugtraq: 20190730 [SECURITY] [DSA 4488-1] exim4 security update (Google Search) https://seclists.org/bugtraq/2019/Jul/51 Debian Security Information: DSA-4488 (Google Search) https://www.debian.org/security/2019/dsa-4488 https://security.gentoo.org/glsa/201909-06 http://www.openwall.com/lists/oss-security/2019/07/26/5