UbuntuUSN-1060-1Exim vulnerabilities
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
84.8%
Releases
- Ubuntu 10.10
- Ubuntu 10.04
- Ubuntu 9.10
- Ubuntu 8.04
- Ubuntu 6.06
Packages
- exim4 -
Details
It was discovered that Exim contained a design flaw in the way it processed
alternate configuration files. An attacker that obtained privileges of the
“Debian-exim” user could use an alternate configuration file to obtain
root privileges. (CVE-2010-4345)
It was discovered that Exim incorrectly handled certain return values when
handling logging. An attacker that obtained privileges of the “Debian-exim”
user could use this flaw to obtain root privileges. (CVE-2011-0017)
Dan Rosenberg discovered that Exim incorrectly handled writable sticky-bit
mail directories. If Exim were configured in this manner, a local user
could use this flaw to cause a denial of service or possibly gain
privileges. This issue only applied to Ubuntu 6.06 LTS, 8.04 LTS, 9.10,
and 10.04 LTS. (CVE-2010-2023)
Dan Rosenberg discovered that Exim incorrectly handled MBX locking. If
Exim were configured in this manner, a local user could use this flaw to
cause a denial of service or possibly gain privileges. This issue only
applied to Ubuntu 6.06 LTS, 8.04 LTS, 9.10, and 10.04 LTS. (CVE-2010-2024)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.10 | noarch | exim4-daemon-heavy | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-base | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-daemon-heavy-dbg | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-daemon-light | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-daemon-light-dbg | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-dbg | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-dev | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | eximon4 | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 9.10 | noarch | exim4-daemon-custom | < 4.69-11ubuntu4.2 | UNKNOWN |
| Ubuntu | 8.04 | noarch | exim4-daemon-heavy | < 4.69-2ubuntu0.3 | UNKNOWN |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
84.8%