CVE-2020-28008: Assorted attacks in Exim's spool directory