CVE-2010-4345

5 known exploits for CVE-2010-4345

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

Affected products: Exim, Red Hat
Exim: ≤ 4.72

Fix: Available
CVSS 3.1: 7.8 HIGH
EPSS: 18.1% (97th percentile)
Weakness: CWE-77
NVD status: Analyzed
Published: 2010-12-14

CVE-2010-4345 at NVD

Authoritative description, scoring and affected products

📄 Qualys Security Advisory - Exim 21Nails Advisory

2026-02-11 Qualys Security AdvisoryPACKETSTORMPerl

Exim4 <= 4.69 - string_format Function Heap Buffer Overflow

2014-07-01 RootSEEBUGRuby

Exim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)

2010-12-16 MetasploitEXPLOITDBRuby

Exim4 <= 4.69 string_format Function Heap Buffer Overflow

2010-12-11 H D MoorePACKETSTORMRuby

Exim4 string_format Function Heap Buffer Overflow

2010-12-07 jduck <jduck@metasploit.com>, hdm <x@hdm.io>METASPLOITRuby