CVE-2010-2024

Severity Score

4.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.

transports/appendfile.c en Exim anterior a v4.72, cuando el bloqueo MBX está habilitado, permite a usuarios locales cambiar permisos de archivos o crear archivos de su elección, y provocar una denegación de servicio o posiblemente obtener privilegios, a través de un ataque de enlace simbólico en un fichero bloqueado en /tmp/.

*Credits: N/A

CVSS Scores

NISTv2 4.4

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-05-24 CVE Reserved
2010-06-04 CVE Published
2023-03-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CAPEC

References (18)

URL	Tag	Source
http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0079.html	Mailing List
http://lists.exim.org/lurker/message/20100524.175925.9a69f755.en.html	Mailing List
http://secunia.com/advisories/40123	Third Party Advisory
http://secunia.com/advisories/43243	Third Party Advisory
http://vcs.exim.org/viewvc/exim/exim-doc/doc-txt/ChangeLog?view=markup&pathrev=exim-4_72_RC2	X_refsource_confirm
http://www.securityfocus.com/archive/1/511653/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/40454	Vdb Entry
http://www.vupen.com/english/advisories/2010/1402	Vdb Entry
http://www.vupen.com/english/advisories/2011/0364	Vdb Entry
https://bugzilla.redhat.com/show_bug.cgi?id=600097	X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/59042	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://bugs.exim.org/show_bug.cgi?id=989	2018-10-10
http://vcs.exim.org/viewvc/exim/exim-src/src/transports/appendfile.c?r1=1.25&r2=1.26	2018-10-10

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042587.html	2018-10-10
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042613.html	2018-10-10
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html	2018-10-10
http://secunia.com/advisories/40019	2018-10-10
http://www.ubuntu.com/usn/USN-1060-1	2018-10-10

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				<= 4.71 Search vendor "Exim" for product "Exim" and version " <= 4.71"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.10 Search vendor "Exim" for product "Exim" and version "4.10"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.20 Search vendor "Exim" for product "Exim" and version "4.20"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.21 Search vendor "Exim" for product "Exim" and version "4.21"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.22 Search vendor "Exim" for product "Exim" and version "4.22"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.23 Search vendor "Exim" for product "Exim" and version "4.23"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.24 Search vendor "Exim" for product "Exim" and version "4.24"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.30 Search vendor "Exim" for product "Exim" and version "4.30"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.31 Search vendor "Exim" for product "Exim" and version "4.31"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.32 Search vendor "Exim" for product "Exim" and version "4.32"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.33 Search vendor "Exim" for product "Exim" and version "4.33"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.34 Search vendor "Exim" for product "Exim" and version "4.34"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.40 Search vendor "Exim" for product "Exim" and version "4.40"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.41 Search vendor "Exim" for product "Exim" and version "4.41"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.42 Search vendor "Exim" for product "Exim" and version "4.42"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.43 Search vendor "Exim" for product "Exim" and version "4.43"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.44 Search vendor "Exim" for product "Exim" and version "4.44"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.50 Search vendor "Exim" for product "Exim" and version "4.50"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.51 Search vendor "Exim" for product "Exim" and version "4.51"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.52 Search vendor "Exim" for product "Exim" and version "4.52"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.53 Search vendor "Exim" for product "Exim" and version "4.53"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.54 Search vendor "Exim" for product "Exim" and version "4.54"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.60 Search vendor "Exim" for product "Exim" and version "4.60"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.61 Search vendor "Exim" for product "Exim" and version "4.61"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.62 Search vendor "Exim" for product "Exim" and version "4.62"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.63 Search vendor "Exim" for product "Exim" and version "4.63"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.64 Search vendor "Exim" for product "Exim" and version "4.64"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.65 Search vendor "Exim" for product "Exim" and version "4.65"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.66 Search vendor "Exim" for product "Exim" and version "4.66"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.67 Search vendor "Exim" for product "Exim" and version "4.67"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.68 Search vendor "Exim" for product "Exim" and version "4.68"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.69 Search vendor "Exim" for product "Exim" and version "4.69"		-		Affected
Exim Search vendor "Exim"		Exim Search vendor "Exim" for product "Exim"				4.70 Search vendor "Exim" for product "Exim" and version "4.70"		-		Affected