CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files…

published June 7, 2010

CVSS
—
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Published
2010-06-07T14:00Z
EPSS history
Timeline
  • 07 JUN 14:00Z
    transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files…
    cvelistv5