Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-2972

Опубликовано: 23 июл. 2014
Источник: redhat
CVSS2: 3.7
EPSS Низкий

Описание

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Отчет

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5eximWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-138
https://bugzilla.redhat.com/show_bug.cgi?id=1122552exim: local code execution via string expansion

EPSS

Процентиль: 38%
0.00487
Низкий

3.7 Low

CVSS2

Связанные уязвимости

ubuntu
почти 12 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

nvd
почти 12 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

debian
почти 12 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, w ...

github
около 4 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

EPSS

Процентиль: 38%
0.00487
Низкий

3.7 Low

CVSS2