Back to KEVs

CVE-2010-4345

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate...

Basic Information

CVE State
PUBLISHED
Reserved Date
November 30, 2010
Published Date
December 14, 2010
Last Updated
February 07, 2025
Vendor
Exim
Product
Exim
Description
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Tags
cisa metasploit_scanner

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

SSVC Information

Exploitation
active
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2022-03-25 00:00:00 UTC) Source

References

http://secunia.com/advisories/43128 http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html http://www.kb.cert.org/vuls/id/758489 http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html https://bugzilla.redhat.com/show_bug.cgi?id=662012 http://www.vupen.com/english/advisories/2011/0364 http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format http://www.redhat.com/support/errata/RHSA-2011-0153.html http://www.securityfocus.com/bid/45341 http://secunia.com/advisories/42930 http://secunia.com/advisories/42576 http://secunia.com/advisories/43243 http://www.securitytracker.com/id?1024859 http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html http://www.debian.org/security/2011/dsa-2154 http://www.securityfocus.com/archive/1/515172/100/0/threaded http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ http://www.vupen.com/english/advisories/2011/0245 http://www.vupen.com/english/advisories/2011/0135 http://www.ubuntu.com/usn/USN-1060-1 http://www.vupen.com/english/advisories/2010/3204 http://bugs.exim.org/show_bug.cgi?id=1044 http://www.debian.org/security/2010/dsa-2131 http://www.vupen.com/english/advisories/2010/3171 http://www.cpanel.net/2010/12/critical-exim-security-update.html http://openwall.com/lists/oss-security/2010/12/10/1 http://www.openwall.com/lists/oss-security/2021/05/04/7

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-03-25 00:00:00 UTC

Scanner Integrations

Scanner URL Date Detected
Metasploit https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/exim4_string_format.rb 2025-04-29 11:01:27 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

exim4_string_format

Type: metasploit • Created: Unknown

Metasploit module for CVE-2010-4345

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Detected by Metasploit