rewindex

RewindexCVEs

CVE-2010-4345: Exim Privilege Escalation Vulnerability

High · CVSS 7.8 (CVSS 3.1)KEV known exploitedEPSS 18.0%, 97th percentilePublished Updated Assigner: redhat

In CISA’s Known Exploited Vulnerabilities catalog: Exim Privilege Escalation Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: Apply updates per vendor instructions.

Description

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Exim: Exim

References

All CVEsMarkdownJSON