Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
16 Jul 2024, 17:57
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.21:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:2.11:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.05:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:2.12:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.22:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.00:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.20:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:2.10:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.16:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.12:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.01:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.11:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.31:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.01:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.14:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.03:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.15:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.33:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.32:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.11:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.00:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.13:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.30:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.71:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.35:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.03:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.10:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.34:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.02:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.02:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.04:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.14:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:3.36:*:*:*:*:*:*:* cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:* |
cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:* cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:* |
CVSS |
v2 : v3 : |
v2 : 6.9
v3 : 7.8 |
CWE | NVD-CWE-noinfo | |
First Time |
Debian debian Linux
Opensuse opensuse Canonical ubuntu Linux Canonical Debian Opensuse |
|
References | () http://bugs.exim.org/show_bug.cgi?id=1044 - Issue Tracking, Patch | |
References | () http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html - Mailing List, Patch | |
References | () http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html - Mailing List | |
References | () http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html - Mailing List, Third Party Advisory | |
References | () http://openwall.com/lists/oss-security/2010/12/10/1 - Mailing List | |
References | () http://secunia.com/advisories/42576 - Broken Link, Vendor Advisory | |
References | () http://secunia.com/advisories/42930 - Broken Link | |
References | () http://secunia.com/advisories/43128 - Broken Link | |
References | () http://secunia.com/advisories/43243 - Broken Link | |
References | () http://www.cpanel.net/2010/12/critical-exim-security-update.html - Broken Link | |
References | () http://www.debian.org/security/2010/dsa-2131 - Mailing List, Third Party Advisory | |
References | () http://www.debian.org/security/2011/dsa-2154 - Mailing List, Third Party Advisory | |
References | () http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html - Mailing List, Vendor Advisory | |
References | () http://www.kb.cert.org/vuls/id/758489 - Third Party Advisory, US Government Resource | |
References | () http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format - Third Party Advisory | |
References | () http://www.openwall.com/lists/oss-security/2021/05/04/7 - Mailing List | |
References | () http://www.redhat.com/support/errata/RHSA-2011-0153.html - Broken Link | |
References | () http://www.securityfocus.com/archive/1/515172/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry | |
References | () http://www.securityfocus.com/bid/45341 - Broken Link, Third Party Advisory, VDB Entry | |
References | () http://www.securitytracker.com/id?1024859 - Broken Link, Third Party Advisory, VDB Entry | |
References | () http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ - Press/Media Coverage, Third Party Advisory | |
References | () http://www.ubuntu.com/usn/USN-1060-1 - Third Party Advisory | |
References | () http://www.vupen.com/english/advisories/2010/3171 - Broken Link, Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2010/3204 - Broken Link, Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2011/0135 - Broken Link | |
References | () http://www.vupen.com/english/advisories/2011/0245 - Broken Link | |
References | () http://www.vupen.com/english/advisories/2011/0364 - Broken Link | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=662012 - Issue Tracking, Patch |
Information
Published : 2010-12-14 16:00
Updated : 2024-07-16 17:57
NVD link : CVE-2010-4345
Mitre link : CVE-2010-4345
CVE.ORG link : CVE-2010-4345
JSON object : View
Products Affected
canonical
- ubuntu_linux
exim
- exim
opensuse
- opensuse
debian
- debian_linux
CWE