Read the docs
TI-2010-01940 Aliases CVE-2010-2024GHSA-rwch-4jch-mjx7

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local…

Priority LOW 20CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.

Why it matters now

EPSS 0.0028 20th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*up to 4.71VulnerableExim
cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:*4.10VulnerableExim
cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:*4.20VulnerableExim
cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:*4.21VulnerableExim
cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:*4.22VulnerableExim
cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:*4.23VulnerableExim
cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:*4.24VulnerableExim
cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:*4.30VulnerableExim
cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:*4.31VulnerableExim
cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:*4.32VulnerableExim
  • cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:* Versions up to 4.71 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:* Versions 4.10 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:* Versions 4.20 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:* Versions 4.21 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:* Versions 4.22 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:* Versions 4.23 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:* Versions 4.24 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:* Versions 4.30 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:* Versions 4.31 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:* Versions 4.32 Vulnerable ·Exim
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:*4.33VulnerableExim
cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:*4.34VulnerableExim
cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:*4.40VulnerableExim
cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:*4.41VulnerableExim
cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:*4.42VulnerableExim
cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:*4.43VulnerableExim
cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:*4.44VulnerableExim
cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:*4.50VulnerableExim
cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:*4.51VulnerableExim
cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:*4.52VulnerableExim
cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:*4.53VulnerableExim
cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:*4.54VulnerableExim
cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:*4.60VulnerableExim
cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:*4.61VulnerableExim
cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:*4.62VulnerableExim
cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:*4.63VulnerableExim
cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:*4.64VulnerableExim
cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:*4.65VulnerableExim
cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:*4.66VulnerableExim
cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:*4.67VulnerableExim
cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:*4.68VulnerableExim
cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:*4.69VulnerableExim
cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*4.70VulnerableExim
  • cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:* Versions 4.33 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:* Versions 4.34 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:* Versions 4.40 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:* Versions 4.41 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:* Versions 4.42 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:* Versions 4.43 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:* Versions 4.44 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:* Versions 4.50 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:* Versions 4.51 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:* Versions 4.52 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:* Versions 4.53 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:* Versions 4.54 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:* Versions 4.60 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:* Versions 4.61 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:* Versions 4.62 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:* Versions 4.63 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:* Versions 4.64 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:* Versions 4.65 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:* Versions 4.66 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:* Versions 4.67 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:* Versions 4.68 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:* Versions 4.69 Vulnerable ·Exim
  • cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:* Versions 4.70 Vulnerable ·Exim

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix yet
Red Hat Enterprise Linux 5AffectedNo fix yet

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-2024
  2. 2026-10-03 Alias added: GHSA-rwch-4jch-mjx7

References

Patch 2

Advisory 4

Other 6

  • TI-2019-12627 Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than… KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-07471 OS command injection in exim KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-04965 An issue was discovered in the base64d function in the SMTP listener in Exim before… KEVCVSS 3.1CRITICAL 9.8
  • TI-2010-04077 Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70… KEVCVSS 3.1CRITICAL 9.8
  • TI-2010-04078 Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of… KEVCVSS 3.1HIGH 7.8
  • TI-2025-19707 SQL injection in Exim CVSS 3.1CRITICAL 9.8
See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences