PT-2010-5428 · Exim+1 · Exim+1

Mark J. Cox · Publicado 2010-12-14 · Atualizado 2025-03-13 · CVE-2010-4345

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exim versions 4.72 and earlier

Description The issue allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool directory directive.

Recommendations For Exim versions 4.72 and earlier, consider restricting the ability of the exim user account to specify alternate configuration files until a patch is available. As a temporary workaround, consider disabling the use of the spool directory directive in configuration files to minimize the risk of exploitation.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2010-4345

DSA-2154-1

OPENSUSE-SU-2024:10017-1

RHSA-2011:0153

RHSA-2011_0153

Produtos afetados

Exim

Red Hat

Referências · 53

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/exim4_string_format.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16925 · Exploit
• http://secunia.com/advisories/43128 · Nota
• http://secunia.com/advisories/42576 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0364 · Nota
• https://suse.com/security/cve/CVE-2014-2972 · Nota
• http://redhat.com/support/errata/RHSA-2011-0153.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/12/10/1 · Nota
• http://securitytracker.com/id?1024859 · Nota
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Nota
• https://suse.com/security/cve/CVE-2010-4344 · Nota
• http://securityfocus.com/bid/45341 · Nota
• https://access.redhat.com/errata/RHSA-2011:0153 · Nota
• http://debian.org/security/2010/dsa-2131 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-1407 · Nota