Cybersecurity Alerts

Exim Privilege Escalation Vulnerability

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-264

References

• https://nvd.nist.gov/vuln/detail/CVE-2010-4345