CVE-2011-0017

The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to…

published February 2, 2011

CVSS
—
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.4th percentile
Published
2011-02-02T00:00Z
EPSS history
Timeline
  • 02 FEB 00:00Z
    The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to…
    cvelistv5