CVE-2010-2023

2010-06-07T17:12:00
ID CVE-2010-2023
Type cve
Reporter cve@mitre.org
Modified 2018-10-10T19:58:00

Description

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.