Lucene search
+L

2280 matches found

OSV
OSV
added 2011/02/02 1:00 a.m.11 views

DEBIAN-CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

6.9CVSS6.7AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
added 2011/02/02 1:00 a.m.27 views

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

6.9CVSS4.9AI score0.00379EPSS
SaveExploits0References15
Prion
Prion
added 2011/02/02 1:00 a.m.34 views

Design/Logic Flaw

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

6.9CVSS6.6AI score0.00379EPSS
SaveExploits0References15Affected Software1
Cvelist
Cvelist
added 2011/02/02 12:00 a.m.34 views

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

6AI score0.00379EPSS
SaveExploits0References15
CVE
CVE
added 2011/02/02 12:00 a.m.103 views

CVE-2011-0017

Exim has a local-privilege-attack vulnerability (CVE-2011-0017) in open_log() for Exim 4.72 and earlier, where return values from setuid/setgid are not checked, enabling a local user to append log data to arbitrary files via a symlink attack. Public advisories and patch notes indicate this was ad...

6.9CVSS6.1AI score0.00379EPSS
SaveExploits0References15Affected Software1
Debian CVE
Debian CVE
added 2011/02/02 12:00 a.m.33 views

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

6.9CVSS7.1AI score0.00379EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/02/01 12:00 a.m.14 views

Exim < 4.74 Local Privilege Escalation Vulnerability

Binary data 5752.prm...

6.9CVSS7.3AI score0.00379EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2011/02/01 12:00 a.m.43 views

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

6.9CVSS7.2AI score0.00379EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2011/01/31 12:00 a.m.29 views

exim -- local privilege escalation

exim.org reports: CVE-2011-0017 - check return value of setuid/setgid. This is a privilege escalation vulnerability whereby the Exim run-time user can cause root to append content of the attacker's choosing to arbitrary files...

6.9CVSS2.9AI score0.00379EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2011/01/31 12:00 a.m.38 views

CentOS Update for exim CESA-2011:0153 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS8.4AI score0.18105EPSS
SaveExploits5References4
OpenVAS
OpenVAS
added 2011/01/31 12:00 a.m.33 views

CentOS Update for exim CESA-2010:0970 centos4 i386

Check for the Version of exim OpenVAS Vulnerability Test CentOS Update for exim CESA-2010:0970 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

9.3CVSS0.3AI score0.71901EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2011/01/31 12:00 a.m.29 views

CentOS Update for exim CESA-2011:0153 centos4 i386

Check for the Version of exim OpenVAS Vulnerability Test CentOS Update for exim CESA-2011:0153 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

6.9CVSS0.4AI score0.18105EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2011/01/31 12:00 a.m.35 views

CentOS Update for exim CESA-2010:0970 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.8CVSS8.4AI score0.71901EPSS
SaveExploits7References4
Debian
Debian
added 2011/01/30 10:41 a.m.51 views

[SECURITY] [DSA-2154-1] exim4 security update

------------------------------------------------------------------------ Debian Security Advisory DSA-2154-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 30, 2011 http://www.debian.org/security/faq -...

7.8CVSS9.9AI score0.18105EPSS
SaveExploits5
OSV
OSV
added 2011/01/30 12:00 a.m.57 views

DSA-2154-1 exim4 - privilege escalation

Bulletin has no description...

7.8CVSS7.4AI score0.18105EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2011/01/28 12:00 a.m.38 views

CentOS 4 / 5 : exim (CESA-2011:0153)

Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS8.5AI score0.18105EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
added 2011/01/28 12:00 a.m.34 views

CentOS 4 : exim (CESA-2010:0970)

Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability...

9.8CVSS8.8AI score0.71901EPSS
SaveExploits7References3
Cent OS
Cent OS
added 2011/01/27 9:23 a.m.87 views

exim security update

CentOS Errata and Security Advisory CESA-2011:0153 Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

7.8CVSS7.6AI score0.18105EPSS
SaveExploits5References8
Cent OS
Cent OS
added 2011/01/27 9:07 a.m.99 views

exim security update

CentOS Errata and Security Advisory CESA-2010:0970 Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having...

9.8CVSS7.8AI score0.71901EPSS
SaveExploits7References8
OpenVAS
OpenVAS
added 2011/01/24 12:00 a.m.21 views

FreeBSD Ports: exim

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.8CVSS7.8AI score0.18105EPSS
SaveExploits5References5
Rows per page
Query Builder