AEGLIX vulnerability intelligence
CVE-2010-4345
HIGH · CVSS 7.8 · Analyzed
Published: 2010-12-14 · Updated: 2026-06-16 · Source: NVD
Vulnerability overview
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Severity and scoring
- CVSS score
- 7.8 · HIGH
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-77, NVD-CWE-noinfo
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- Exim · Exim
- Added to catalog
- 2022-03-25
- Required action
- Apply updates per vendor instructions.
- CISA remediation due date
- 2022-04-15
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
Through (inclusive): 4.72
cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- http://bugs.exim.org/show_bug.cgi?id=1044
Issue Tracking · Patch
- http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html
Mailing List · Patch
- http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html
Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html
Mailing List · Third Party Advisory
- http://openwall.com/lists/oss-security/2010/12/10/1
Mailing List
- http://secunia.com/advisories/42576
Broken Link · Vendor Advisory
- http://secunia.com/advisories/42930
Broken Link
- http://secunia.com/advisories/43128
Broken Link
- http://secunia.com/advisories/43243
Broken Link
- http://www.cpanel.net/2010/12/critical-exim-security-update.html
Broken Link
- http://www.debian.org/security/2010/dsa-2131
Mailing List · Third Party Advisory
- http://www.debian.org/security/2011/dsa-2154
Mailing List · Third Party Advisory
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html
Mailing List · Vendor Advisory
- http://www.kb.cert.org/vuls/id/758489
Third Party Advisory · US Government Resource
- http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format
Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/7
Mailing List
- http://www.redhat.com/support/errata/RHSA-2011-0153.html
Broken Link
- http://www.securityfocus.com/archive/1/515172/100/0/threaded
Broken Link · Third Party Advisory · VDB Entry
- http://www.securityfocus.com/bid/45341
Broken Link · Third Party Advisory · VDB Entry
- http://www.securitytracker.com/id?1024859
Broken Link · Third Party Advisory · VDB Entry
- http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/
Press/Media Coverage · Third Party Advisory
- http://www.ubuntu.com/usn/USN-1060-1
Third Party Advisory
- http://www.vupen.com/english/advisories/2010/3171
Broken Link · Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3204
Broken Link · Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0135
Broken Link
- http://www.vupen.com/english/advisories/2011/0245
Broken Link
- http://www.vupen.com/english/advisories/2011/0364
Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=662012
Issue Tracking · Patch
- http://bugs.exim.org/show_bug.cgi?id=1044
Issue Tracking · Patch
- http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html
Mailing List · Patch
- http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html
Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html
Mailing List · Third Party Advisory
- http://openwall.com/lists/oss-security/2010/12/10/1
Mailing List
- http://secunia.com/advisories/42576
Broken Link · Vendor Advisory
- http://secunia.com/advisories/42930
Broken Link
- http://secunia.com/advisories/43128
Broken Link
- http://secunia.com/advisories/43243
Broken Link
- http://www.cpanel.net/2010/12/critical-exim-security-update.html
Broken Link
- http://www.debian.org/security/2010/dsa-2131
Mailing List · Third Party Advisory
- http://www.debian.org/security/2011/dsa-2154
Mailing List · Third Party Advisory
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html
Mailing List · Vendor Advisory
- http://www.kb.cert.org/vuls/id/758489
Third Party Advisory · US Government Resource
- http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format
Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/7
Mailing List
- http://www.redhat.com/support/errata/RHSA-2011-0153.html
Broken Link
- http://www.securityfocus.com/archive/1/515172/100/0/threaded
Broken Link · Third Party Advisory · VDB Entry
- http://www.securityfocus.com/bid/45341
Broken Link · Third Party Advisory · VDB Entry
- http://www.securitytracker.com/id?1024859
Broken Link · Third Party Advisory · VDB Entry
- http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/
Press/Media Coverage · Third Party Advisory
- http://www.ubuntu.com/usn/USN-1060-1
Third Party Advisory
- http://www.vupen.com/english/advisories/2010/3171
Broken Link · Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3204
Broken Link · Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0135
Broken Link
- http://www.vupen.com/english/advisories/2011/0245
Broken Link
- http://www.vupen.com/english/advisories/2011/0364
Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=662012
Issue Tracking · Patch
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-4345
US Government Resource