Описание
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
Ссылки
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
EPSS
6.3 Medium
CVSS3
6.3 Medium
CVSS2
Дефекты
Связанные уязвимости
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By lev ...
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
Уязвимость агента пересылки сообщений Exim, связанная с ошибками управления привилегиями, позволяющая нарушителю удалять произвольные файлы в системе
ALT-PU-2021-1764: package `exim` update to version 4.94.2-alt1
EPSS
6.3 Medium
CVSS3
6.3 Medium
CVSS2