CVE-2010-4345Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-4345 | First vendor Publication | 2010-12-14 |
| Vendor | Cve | Last vendor Modification | 2011-02-17 |
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 6.9 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 3.4 | Authentification | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4345 |
CWE : Common Weakness Enumeration
| id | Name |
|---|---|
| CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
ExploitDB Exploits
| id | Description |
|---|---|
| 2010-12-16 | Exim4 <= 4.69 string_format Function Heap Buffer Overflow |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 69860 | Exim exim User Account Configuration File Directive Local Privilege Escalation |
Metasploit Database
| id | Description |
|---|---|
| 2010-12-07 | Exim4 <= 4.69 string_format Function Heap Buffer Overflow |
Internal Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2013-05-10 23:37:37 |
|
| 2013-05-01 17:22:39 |
|
| 2013-05-01 13:28:07 |
|
| 2013-05-01 09:22:48 |
|
| 2013-05-01 05:38:32 |
|
(Critical)
(Medium)
