The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.74 - | |
| References | () http://lists.exim.org/lurker/message/20110126.034702.4d69c278.en.html - Patch | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html - | |
| References | () http://osvdb.org/70696 - | |
| References | () http://secunia.com/advisories/43101 - Vendor Advisory | |
| References | () http://secunia.com/advisories/43128 - Vendor Advisory | |
| References | () http://secunia.com/advisories/43243 - | |
| References | () http://www.debian.org/security/2011/dsa-2154 - | |
| References | () http://www.securityfocus.com/bid/46065 - | |
| References | () http://www.ubuntu.com/usn/USN-1060-1 - | |
| References | () http://www.vupen.com/english/advisories/2011/0224 - Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2011/0245 - Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2011/0364 - | |
| References | () http://www.vupen.com/english/advisories/2011/0464 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/65028 - |
Information
Published : 2011-02-02 01:00
Updated : 2024-11-21 01:23
NVD link : CVE-2011-0017
Mitre link : CVE-2011-0017
CVE.ORG link : CVE-2011-0017
JSON object : View
Products Affected
exim
- exim