NVD

Id
15600  
Name
CVE-2010-4345  
Description
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-14  
Modified Date
2011-02-17  
Seq
2010-4345  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88309 15600 CVE-2010-4345 http://bugs.exim.org/show_bug.cgi?id=1044  View
88310 15600 CVE-2010-4345 [exim-dev] 20101209 Re: [Exim-maintainers] Remote root vulnerability in Exim  View
88311 15600 CVE-2010-4345 [exim-dev] 20101210 Re: Remote root vulnerability in Exim  View
88312 15600 CVE-2010-4345 SUSE-SA:2010:059  View
88313 15600 CVE-2010-4345 [oss-security] 20101210 Exim remote root  View
88314 15600 CVE-2010-4345 http://www.cpanel.net/2010/12/critical-exim-security-update.html  View
88315 15600 CVE-2010-4345 DSA-2131  View
88316 15600 CVE-2010-4345 DSA-2154  View
88317 15600 CVE-2010-4345 [exim-dev] 20101207 Remote root vulnerability in Exim  View
88318 15600 CVE-2010-4345 VU#758489  View
88319 15600 CVE-2010-4345 http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format  View
88320 15600 CVE-2010-4345 RHSA-2011:0153  View
88321 15600 CVE-2010-4345 20101213 Exim security issue in historical release  View
88322 15600 CVE-2010-4345 45341  View
88323 15600 CVE-2010-4345 1024859  View
88324 15600 CVE-2010-4345 http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/  View
88325 15600 CVE-2010-4345 USN-1060-1  View
88326 15600 CVE-2010-4345 ADV-2010-3171  View
88327 15600 CVE-2010-4345 ADV-2010-3204  View
88328 15600 CVE-2010-4345 ADV-2011-0135  View
88329 15600 CVE-2010-4345 ADV-2011-0245  View
88330 15600 CVE-2010-4345 ADV-2011-0364  View
88331 15600 CVE-2010-4345 https://bugzilla.redhat.com/show_bug.cgi?id=662012  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36874 JVNDB-2010-002654 Exim における権限昇格の脆弱性 Exim には、設定ファイルの処理に起因する権限昇格の脆弱性が存在します。 CVE-2010-4345 46925 CVE-2010-4345 15600 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002654.html 2010-12-14 2011-01-19 View