CVE-2010-4345: Exim Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2010-4345

Weakness behind it

CISA records this vulnerability as an instance of CWE-264. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-4345
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog