Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0017
6.9
MEDIUMCVSS v2
Published
February 2, 2011
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
Exim/exim
GitHubExim Mail Transport Agent - source, testsuite and documentation
GitHubExim Mail Transport Agent - source, testsuite and documentation= 2.11, = 4.70, = 4.69, = 4.66, = 4.10, = 3.16, = 3.21, = 3.01, = 3.31, = 4.43, = 3.30, = 4.63, = 4.21, = 4.22, = 4.40, = 4.03, = 4.51, = 4.30, = 4.24, = 3.33, <= 4.72, = 4.52, = 4.67, = 4.00, = 3.36, = 3.10, = 4.71, = 4.61, = 4.60, = 4.42, = 4.65, = 4.32, = 4.20, = 4.02, = 4.01, = 3.22, = 3.12, = 3.11, = 2.10, = 4.44, = 4.62, = 4.41, = 4.04, = 3.14, = 3.00, = 2.12, = 4.64, = 4.23, = 4.68, = 4.14, = 4.05, = 3.34, = 3.15, = 3.02, = 4.33, = 4.31, = 4.54, = 4.53, = 4.11, = 4.12, = 3.35, = 3.20, = 3.03, = 4.34, = 4.50, = 3.32, = 3.13NVD