CVE-2010-4345

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Exim是一个运行于Unix系统中的开源消息传送代理（MTA），它主要负责邮件的路由、转发和投递。 Exim 4.72及之前版本中存在权限许可和访问控制问题漏洞。本地用户可以通过利用exim用户账户的权限指定交替的配置文件(该文件带有包含任意命令的指令)获取特权。该漏洞已经通过spool_directory指令得到证实。

CVE-2010-4345 affects n/a n/a. Confirmed exploitation in the wild; remediate immediately. Exim是一个运行于Unix系统中的开源消息传送代理（MTA），它主要负责邮件的路由、转发和投递。 Exim 4.72及之前版本中存在权限许可和访问控制问题漏洞。本地用户可以通过利用exim用户账户的权限指定交替的配置文件(该文件带有包含任意命令的指令)获取特权。该漏洞已经通过spool_directory指令得到证实。 CVE-2010-4345 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2010-4345

I. Basic Information for CVE-2010-4345

Affected Products

II. Public POCs for CVE-2010-4345

III. Intelligence Information for CVE-2010-4345

Vendor Advisories for CVE-2010-4345 (17)

• https://bugzilla.redhat.com/show_bug.cgi?id=662012 x_refsource_CONFIRM
• http://secunia.com/advisories/43128 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/45341 vdb-entry x_refsource_BID
• http://secunia.com/advisories/43243 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42576 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42930 third-party-advisory x_refsource_SECUNIA
• http://www.securitytracker.com/id?1024859 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2010/dsa-2131 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2011/dsa-2154 vendor-advisory x_refsource_DEBIAN
• 🔗 VU#758489 - Exim alternate configuration privilege escalation vulnerability Read full article third-party-advisory x_refsource_CERT-VN
• 🔗 USN-1060-1: Exim vulnerabilities | Ubuntu security notices | Ubuntu Read full article vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2010/3204 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0245 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3171 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0135 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0364 vdb-entry x_refsource_VUPEN
• http://www.securityfocus.com/archive/1/515172/100/0/threaded mailing-list x_refsource_BUGTRAQ

Proof of Concept for CVE-2010-4345 (1)

• 🔗 Rapid7 Vulnerability Database Read full article x_refsource_MISC

Mailing List Discussions for CVE-2010-4345 (5)

• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html vendor-advisory x_refsource_SUSE
• http://openwall.com/lists/oss-security/2010/12/10/1 mailing-list x_refsource_MLIST
• http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html mailing-list x_refsource_MLIST
• http://www.openwall.com/lists/oss-security/2021/05/04/7 mailing-list x_refsource_MLIST
• http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html mailing-list x_refsource_MLIST

Other References for CVE-2010-4345 (5)

• http://www.cpanel.net/2010/12/critical-exim-security-update.html x_refsource_CONFIRM
• http://bugs.exim.org/show_bug.cgi?id=1044 x_refsource_CONFIRM
• http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ x_refsource_MISC
• http://www.redhat.com/support/errata/RHSA-2011-0153.html vendor-advisory x_refsource_REDHAT
• http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html mailing-list x_refsource_MLIST

• https://www.cve.org/CVERecord?id=CVE-2010-4345

Same Patch Batch · n/a · 2010-12-14 · 29 CVEs total

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2010-4345