Dashboard / CVE-2010-4345

CVE-2010-4345

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

CISA Known Exploited Vulnerability

Vendor / Product Exim — Exim
Date Added 2022-03-25
Remediation Due 2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2010-4345

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
canonical ubuntu_linux 6.06
canonical ubuntu_linux 8.04
canonical ubuntu_linux 9.10
canonical ubuntu_linux 10.04
canonical ubuntu_linux 10.10
debian debian_linux 5.0
exim exim < 4.72
opensuse opensuse 11.1
opensuse opensuse 11.2
opensuse opensuse 11.3

References & Advisories (29)

http://www.kb.cert.org/vuls/id/758489
Third Party Advisory US Government Resource
http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/
Press/Media Coverage Third Party Advisory
http://www.debian.org/security/2010/dsa-2131
Mailing List Third Party Advisory
http://www.debian.org/security/2011/dsa-2154
Mailing List Third Party Advisory
http://secunia.com/advisories/42576
Broken Link Vendor Advisory
http://www.securityfocus.com/archive/1/515172/100/0/threaded
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/45341
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1024859
Broken Link Third Party Advisory VDB Entry
Showing 25 of 29 references

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links