CVE-2010-4345 — Exim Privilege Escalation Vulnerability

provenance: imported · CVE: CVE-2010-4345

CVE-2010-4345: Exim Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Exim
Product	Exim
Date added	2022-03-25
Due date	2022-04-15
Ransomware campaign use	Unknown

Description

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2010-4345

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-4345
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog