exim exim CVE-2010-4345 is a vulnerability in Exim
Published on December 14, 2010

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Known Exploited Vulnerability

This Exim Privilege Escalation Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

The following remediation steps are recommended / required by April 15, 2022: Apply updates per vendor instructions.

Vulnerability Analysis

Permissions, Privileges, and Access Controls

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.


Products Associated with CVE-2010-4345

You can be notified by stack.watch whenever vulnerabilities like CVE-2010-4345 are published in these products:

Exim
 

What versions of Exim are vulnerable to CVE-2010-4345?