Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-0017
HistoryFeb 01, 2011 - 12:00 a.m.

CVE-2011-0017

2011-02-0100:00:00
ubuntu.com
ubuntu.com
20

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.011

Percentile

84.8%

JSON

The open_log function in log.c in Exim 4.72 and earlier does not check the
return value from (1) setuid or (2) setgid system calls, which allows local
users to append log data to arbitrary files via a symlink attack.

Bugs

Notes

Author Note
mdeslaur may have been introduced by fix for CVE-2010-4345…
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchexim4< 4.60-3ubuntu3.3UNKNOWN
ubuntu8.04noarchexim4< 4.69-2ubuntu0.3UNKNOWN
ubuntu9.10noarchexim4< 4.69-11ubuntu4.2UNKNOWN
ubuntu10.04noarchexim4< 4.71-3ubuntu1.1UNKNOWN
ubuntu10.10noarchexim4< 4.72-1ubuntu1.1UNKNOWN

Related

debian 7
nessus 19
securityvulns 4
osv 3
openvas 22
ubuntu 1
prion 2
nvd 2
debiancve 2
cve 2
attackerkb 1
veracode 1
cisa_kev 1
cvelist 2
freebsd 2
checkpoint_advisories 1
seebug 1
centos 1
redhat 1
oraclelinux 1
cert 1
ubuntucve 1
suse 1
packetstorm 1
metasploit 1
exploitdb 1
gentoo 1
nmap 1
thn 1
debian
debian
[SECURITY] [DSA-2154-1] exim4 security update
2011-01-30 10:41:58
[SECURITY] [DSA-2154-2] exim4 regression fix
2011-01-30 22:04:57
[SECURITY] [DSA-2154-2] exim4 regression fix
2011-01-30 22:04:57
nessus
nessus
Debian DSA-2154-1 : exim4 - privilege escalation
2011-01-31 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : exim4 vulnerabilities (USN-1060-1)
2011-02-11 00:00:00
Exim < 4.74 Local Privilege Escalation
2011-02-03 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA-2154-1] exim4 security update
2011-02-03 00:00:00
Exim memory corruption and remote code execution
2011-02-03 00:00:00
[SECURITY] [DSA-2131-1] New exim4 packages fix remote code execution
2010-12-12 00:00:00
osv
osv
exim4 - privilege escalation
2011-01-30 00:00:00
exim4 - remote code execution
2010-12-10 00:00:00
exim-4.86.2-2.2 on GA media
2024-06-15 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2154-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-1060-1)
2011-02-11 00:00:00
Ubuntu Update for exim4 vulnerabilities USN-1060-1
2011-02-11 00:00:00
ubuntu
ubuntu
Exim vulnerabilities
2011-02-10 00:00:00
prion
prion
Design/Logic Flaw
2010-12-14 16:00:00
Design/Logic Flaw
2011-02-02 01:00:00
nvd
nvd
CVE-2010-4345
2010-12-14 16:00:04
CVE-2011-0017
2011-02-02 01:00:06
debiancve
debiancve
CVE-2011-0017
2011-02-02 01:00:06
CVE-2010-4345
2010-12-14 16:00:04
cve
cve
CVE-2011-0017
2011-02-02 01:00:06
CVE-2010-4345
2010-12-14 16:00:04
attackerkb
attackerkb
CVE-2010-4345
2010-12-14 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:53:13
cisa_kev
cisa_kev
Exim Privilege Escalation Vulnerability
2022-03-25 00:00:00
cvelist
cvelist
CVE-2011-0017
2011-02-02 00:00:00
CVE-2010-4345
2010-12-14 15:00:00
freebsd
freebsd
exim -- local privilege escalation
2011-01-31 00:00:00
exim -- local privilege escalation
2010-12-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Exim Remote Code Execution (CVE-2010-4345)
2022-05-02 00:00:00
seebug
seebug
Exim4 <= 4.69 - string_format Function Heap Buffer Overflow
2014-07-01 00:00:00
centos
centos
exim security update
2011-01-27 09:23:09
redhat
redhat
(RHSA-2011:0153) Moderate: exim security update
2011-01-17 00:00:00
oraclelinux
oraclelinux
exim security update
2011-01-17 00:00:00
cert
cert
Exim alternate configuration privilege escalation vulnerability
2010-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2010-4345
2010-12-14 00:00:00
suse
suse
remote code execution in exim
2010-12-13 10:39:26
packetstorm
packetstorm
Exim4 <= 4.69 string_format Function Heap Buffer Overflow
2010-12-11 00:00:00
metasploit
metasploit
Exim4 string_format Function Heap Buffer Overflow
2010-12-11 10:55:24
exploitdb
exploitdb
Exim4 &lt; 4.69 - string_format Function Heap Buffer Overflow (Metasploit)
2010-12-16 00:00:00
gentoo
gentoo
Exim: Multiple vulnerabilities
2014-01-27 00:00:00
nmap
nmap
smtp-vuln-cve2010-4344 NSE Script
2011-06-24 15:37:53
thn
thn
Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6
2011-07-01 11:41:00

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.011

Percentile

84.8%

JSON
Related for UB:CVE-2011-0017
debian7nessus19securityvulns4osv3openvas22ubuntu1prion2nvd2debiancve2cve2attackerkb1veracode1cisa_kev1cvelist2freebsd2checkpoint_advisories1seebug1centos1redhat1oraclelinux1cert1ubuntucve1suse1packetstorm1metasploit1exploitdb1gentoo1nmap1thn1