NVD

Id
31263  
Name
CVE-2014-2972  
Description
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-09-04  
Modified Date
2016-12-02  
Seq
2014-2972  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163819 31263 CVE-2014-2972 http://git.exim.org/exim.git/commitdiff/7685ce68148a083d7759e78d01aa5198fc099c44  View
163820 31263 CVE-2014-2972 FEDORA-2014-8803  View
163821 31263 CVE-2014-2972 FEDORA-2014-8865  View
163822 31263 CVE-2014-2972 USN-2933-1  View
163823 31263 CVE-2014-2972 https://bugzilla.redhat.com/show_bug.cgi?id=1122552  View
163824 31263 CVE-2014-2972 [exim] 20140722 [exim] Exim 4.83 Released  View
163825 31263 CVE-2014-2972 [exim] 20140722 [exim] Exim Security Advisory CVE-2014-2972  View
163826 31263 CVE-2014-2972 GLSA-201607-12  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15173 JVNDB-2014-004048 Exim の expand.c における権限を取得される脆弱性 Exim の expand.c には、数学的比較を二度拡張するため、権限を取得される、および任意のコマンドを実行される脆弱性が存在します。 CVE-2014-2972 70259 CVE-2014-2972 31263 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004048.html 2014-07-16 2014-09-08 View