Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-2972

Опубликовано: 23 июл. 2014
Источник: redhat
CVSS2: 3.7

Описание

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Отчет

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5eximWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-138
https://bugzilla.redhat.com/show_bug.cgi?id=1122552exim: local code execution via string expansion

3.7 Low

CVSS2

Связанные уязвимости

ubuntu
больше 11 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

nvd
больше 11 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

debian
больше 11 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, w ...

github
больше 3 лет назад

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

3.7 Low

CVSS2