Launchpad.net

CVE 2014-2972

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

See the CVE page on Mitre.org for more details.