CVE-2010-4345
High · 7.8 CISA KEVCVSS
7.8
EPSS
18.0%
Published
Dec 14, 2010
CISA due date
Apr 15, 2022
The record
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | exim4 | 0 | 4.72-3 |
| Debian:12 | exim4 | 0 | 4.72-3 |
| Debian:13 | exim4 | 0 | 4.72-3 |
| Debian:5.0 | exim4 | 0 | 4.69-9+lenny3 |
| Red Hat:enterprise_linux:4::as | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::as | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::as | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::as | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::as | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::es | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::es | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::es | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::es | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::es | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.3 |
| Red Hat:enterprise_linux:5::server | exim | 0 | 0:4.63-5.el5_6.2 |
| Red Hat:enterprise_linux:5::server | exim-debuginfo | 0 | 0:4.63-5.el5_6.2 |
| Red Hat:enterprise_linux:5::server | exim-mon | 0 | 0:4.63-5.el5_6.2 |
| Red Hat:enterprise_linux:5::server | exim-sa | 0 | 0:4.63-5.el5_6.2 |
| openSUSE:Tumbleweed | exim | 0 | 4.86.2-2.2 |
Related vulnerabilities
- CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. Also affects exim4
- CVE-2023-42117 Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. Also affects exim4
- CVE-2023-42116 Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. Also affects exim4
- CVE-2023-42119 Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. Also affects exim4
- CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. Also affects exim4
- CVE-2022-3559 A vulnerability was found in Exim and classified as problematic. Also affects exim4
- CVE-2017-16944 The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows… Also affects exim4
- CVE-2017-16943 The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows… Also affects exim4