VulnerabilityModified
CVE-2011-0017
The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
MEDIUM 6.9EPSS 0.38%
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.38% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-59
- Affected
- exim/exim
- Source
- secalert@redhat.com
References
- ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.74
- http://lists.exim.org/lurker/message/20110126.034702.4d69c278.en.htmlPatch
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
- http://osvdb.org/70696
- http://secunia.com/advisories/43101Vendor Advisory
- http://secunia.com/advisories/43128Vendor Advisory
- http://secunia.com/advisories/43243
- http://www.debian.org/security/2011/dsa-2154
- http://www.securityfocus.com/bid/46065
- http://www.ubuntu.com/usn/USN-1060-1
- http://www.vupen.com/english/advisories/2011/0224Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0245Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0364
- http://www.vupen.com/english/advisories/2011/0464
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65028
- ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.74
- http://lists.exim.org/lurker/message/20110126.034702.4d69c278.en.htmlPatch
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
- http://osvdb.org/70696
- http://secunia.com/advisories/43101Vendor Advisory
- http://secunia.com/advisories/43128Vendor Advisory
- http://secunia.com/advisories/43243
- http://www.debian.org/security/2011/dsa-2154
- http://www.securityfocus.com/bid/46065
- http://www.ubuntu.com/usn/USN-1060-1
- http://www.vupen.com/english/advisories/2011/0224Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0245Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0364
- http://www.vupen.com/english/advisories/2011/0464
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65028
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.