Unscored severity · published Feb 2, 2011
CVE-2011-0017
The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EX
Exim · Exim
through 4.72; 2.10; 2.11; 2.12; 3.00; 3.01; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0017
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0017
Patch
http://lists.exim.org/lurker/message/20110126.034702.4d69c278.en.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
osvdb.org
http://osvdb.org/70696
Vendor Advisory
http://secunia.com/advisories/43101
Vendor Advisory
http://secunia.com/advisories/43128
More from Exim
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation
9.8
CVE-2018-6789
Exim Buffer Overflow Vulnerability
9.8
CVE-2010-4344
Exim Heap-Based Buffer Overflow Vulnerability
7.8
CVE-2010-4345
Exim Privilege Escalation Vulnerability