National Cyber Awareness System

Vulnerability Summary for CVE-2010-4345

Overview

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#758489

Name: VU#758489

Hyperlink:http://www.kb.cert.org/vuls/id/758489

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=662012

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=662012

External Source: MLIST

Name: [exim-dev] 20101209 Re: [Exim-maintainers] Remote root vulnerability in Exim

Type: Patch Information

Hyperlink:http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html

External Source: CONFIRM

Name: http://bugs.exim.org/show_bug.cgi?id=1044

Type: Patch Information

Hyperlink:http://bugs.exim.org/show_bug.cgi?id=1044

External Source: VUPEN

Name: ADV-2011-0364

Hyperlink:http://www.vupen.com/english/advisories/2011/0364

External Source: VUPEN

Name: ADV-2011-0245

Hyperlink:http://www.vupen.com/english/advisories/2011/0245

External Source: VUPEN

Name: ADV-2011-0135

Hyperlink:http://www.vupen.com/english/advisories/2011/0135

External Source: VUPEN

Name: ADV-2010-3204

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3204

External Source: VUPEN

Name: ADV-2010-3171

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3171

External Source: UBUNTU

Name: USN-1060-1

Hyperlink:http://www.ubuntu.com/usn/USN-1060-1

External Source: MISC

Name: http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/

Hyperlink:http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/

External Source: SECTRACK

Name: 1024859

Hyperlink:http://www.securitytracker.com/id?1024859

External Source: BID

Name: 45341

Hyperlink:http://www.securityfocus.com/bid/45341

External Source: BUGTRAQ

Name: 20101213 Exim security issue in historical release

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/515172/100/0/threaded

External Source: REDHAT

Name: RHSA-2011:0153

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0153.html

External Source: MISC

Name: http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format

Hyperlink:http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format

External Source: MLIST

Name: [exim-dev] 20101207 Remote root vulnerability in Exim

Type: Advisory

Hyperlink:http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html

External Source: DEBIAN

Name: DSA-2154

Hyperlink:http://www.debian.org/security/2011/dsa-2154

External Source: DEBIAN

Name: DSA-2131

Hyperlink:http://www.debian.org/security/2010/dsa-2131

External Source: CONFIRM

Name: http://www.cpanel.net/2010/12/critical-exim-security-update.html

Hyperlink:http://www.cpanel.net/2010/12/critical-exim-security-update.html

External Source: SECUNIA

Name: 43243

Hyperlink:http://secunia.com/advisories/43243

External Source: SECUNIA

Name: 43128

Hyperlink:http://secunia.com/advisories/43128

External Source: SECUNIA

Name: 42930

Hyperlink:http://secunia.com/advisories/42930

External Source: SECUNIA

Name: 42576

Type: Advisory

Hyperlink:http://secunia.com/advisories/42576

External Source: MLIST

Name: [oss-security] 20101210 Exim remote root

Hyperlink:http://openwall.com/lists/oss-security/2010/12/10/1

External Source: SUSE

Name: SUSE-SA:2010:059

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html

External Source: MLIST

Name: [exim-dev] 20101210 Re: Remote root vulnerability in Exim

Hyperlink:http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html