CVE-2010-4345
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Exim Privilege Escalation Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 18% (percentile: 97) as of 1 November 2026
- CWE
- CWE-77
Affected products
exim: exim; opensuse: opensuse; debian: debian linux; canonical: ubuntu linux
References
- http://secunia.com/advisories/42576 Broken LinkVendor Advisory
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html Mailing ListVendor Advisory
- http://www.vupen.com/english/advisories/2010/3171 Broken LinkVendor Advisory
- http://www.vupen.com/english/advisories/2010/3204 Broken LinkVendor Advisory
- http://secunia.com/advisories/42576 Broken LinkVendor Advisory
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html Mailing ListVendor Advisory
- http://www.vupen.com/english/advisories/2010/3171 Broken LinkVendor Advisory
- http://www.vupen.com/english/advisories/2010/3204 Broken LinkVendor Advisory
- http://bugs.exim.org/show_bug.cgi?id=1044 Issue TrackingPatch
- http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html Mailing ListPatch