Red Hat Security AdvisoryRHSA-2011:0153
exim security update
Released 2011-01-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) exim-4.63-5.el5_6.2, exim-4.63-5.el5_6.2.i386, exim-4.63-5.el5_6.2.ia64 +9
- Red Hat Enterprise Linux AS version 4 exim-4.43-1.RHEL4.5.el4_8.3, exim-4.43-1.RHEL4.5.el4_8.3.i386, exim-4.43-1.RHEL4.5.el4_8.3.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 exim-4.43-1.RHEL4.5.el4_8.3, exim-4.43-1.RHEL4.5.el4_8.3.i386, exim-doc-4.43-1.RHEL4.5.el4_8.3 +5
- Red Hat Enterprise Linux ES version 4 exim-4.43-1.RHEL4.5.el4_8.3, exim-4.43-1.RHEL4.5.el4_8.3.i386, exim-4.43-1.RHEL4.5.el4_8.3.ia64 +9
- Red Hat Enterprise Linux WS version 4 exim-4.43-1.RHEL4.5.el4_8.3, exim-4.43-1.RHEL4.5.el4_8.3.i386, exim-4.43-1.RHEL4.5.el4_8.3.ia64 +9
Fixes 1 record
Priority CRITICAL 93KEV
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.17965 · Published 2010-12-14 · Fixed CWE-77
