Exim · Exim
CVE-2010-4345
Exim Privilege Escalation Vulnerability
O que é
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
CISA: Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 15 de abril de 2022
- Adicionada à lista da CISA
- 25 de março de 2022
- Publicada
- 14 de dezembro de 2010
- Gravidade
- Alto 7,8 CVSS 3.1
- Chance de ataques nos próximos 30 dias (EPSS)
- 18% entre os 2,8% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-264
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (20)
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html
- http://www.redhat.com/support/errata/RHSA-2011-0153.html
- http://www.debian.org/security/2011/dsa-2154
- http://secunia.com/advisories/43128
- http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html
- http://www.kb.cert.org/vuls/id/758489
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html
- https://bugzilla.redhat.com/show_bug.cgi?id=662012
- http://www.vupen.com/english/advisories/2011/0364
- http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format
- http://www.securityfocus.com/bid/45341
- http://secunia.com/advisories/42930
- http://secunia.com/advisories/42576
- http://secunia.com/advisories/43243
- http://www.securitytracker.com/id?1024859
- http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html
- http://www.securityfocus.com/archive/1/515172/100/0/threaded
- http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/
- http://www.vupen.com/english/advisories/2011/0245
- http://www.vupen.com/english/advisories/2011/0135
Mais falhas exploradas de Exim
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 25 de mar. de 2022 | Heap-Based Buffer Overflow | Exim | Crítica 9,8 | 72% |
| 3 de nov. de 2021 | Buffer Overflow | Exim | Crítica 9,8 | 82% |
| 3 de mar. de 2022 | Out-of-bounds Write | Exim Internet Mailer | Crítica 9,8 | 42% |
| 10 de jan. de 2022 | Improper Input Validation | Mail Transfer Agent (MTA) | Crítica 9,0 | >99,9% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.