DescriptionExim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2010:059, published Mon, 13 Dec 2010 09:00:00 +0000
- openSUSE-SU-2010:1052-1, published Mon, 13 Dec 2010 12:08:12 +0100 (CET)
List of released packages
|Product(s)||Fixed package version(s)||References|
|openSUSE Tumbleweed|| ||Patchnames: |
openSUSE Tumbleweed GA exim-4.86.2-2.2
SUSE Timeline for this CVECVE page created: Fri Jun 28 07:42:36 2013
CVE page last modified: Mon Feb 13 11:31:24 2023