Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Exim 权限许可和访问控制问题漏洞
Vulnerability Description
Exim是一个运行于Unix系统中的开源消息传送代理（MTA），它主要负责邮件的路由、转发和投递。 Exim 4.72及之前版本中存在权限许可和访问控制问题漏洞。本地用户可以通过利用exim用户账户的权限指定交替的配置文件(该文件带有包含任意命令的指令)获取特权。该漏洞已经通过spool_directory指令得到证实。
CVSS Information
N/A
Vulnerability Type
N/A