Back to CVE records
High 7.8Known exploited (CISA KEV)Published Dec 14, 2010
CVE-2010-4345Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary comm…
Updated under an hour ago ()
Does this affect you?
It affects exim and 3 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Mar 25, 2022; federal agencies had to remediate by Apr 15, 2022. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
- CVSS
- 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-77
- Known exploited
- Added to CISA KEV Mar 25, 2022; federal remediation due Apr 15, 2022Apply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 17.96% (percentile 97)
- Assigned by
- redhat
- NVD analysis
- Analyzed
- Record last updated
- Oct 22, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
exim exim exim:exim | through 4.72 | NVD |
opensuse opensuse opensuse:opensuse | 11.1; 11.2; 11.3 | NVD |
debian debian_linux debian:debian_linux | 5.0 | NVD |
canonical ubuntu_linux canonical:ubuntu_linux | 6.06; 8.04; 9.10; 10.04; 10.10 | NVD |
References
- http://secunia.com/advisories/43128third-party-advisory, x-refsource-secunia, broken-link
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.htmlmailing-list, x-refsource-mlist, patch
- http://www.kb.cert.org/vuls/id/758489third-party-advisory, x-refsource-cert-vn, us-government-resource
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.htmlmailing-list, x-refsource-mlist, vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=662012x-refsource-confirm
- http://www.vupen.com/english/advisories/2011/0364vdb-entry, x-refsource-vupen
- http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_formatx-refsource-misc, third-party-advisory
- http://www.redhat.com/support/errata/RHSA-2011-0153.htmlvendor-advisory, x-refsource-redhat, broken-link
- http://www.securityfocus.com/bid/45341vdb-entry, x-refsource-bid, broken-link, third-party-advisory
- http://secunia.com/advisories/42930third-party-advisory, x-refsource-secunia, broken-link
- http://secunia.com/advisories/42576third-party-advisory, x-refsource-secunia, broken-link, vendor-advisory
- http://secunia.com/advisories/43243third-party-advisory, x-refsource-secunia, broken-link
- http://www.securitytracker.com/id?1024859vdb-entry, x-refsource-sectrack, broken-link, third-party-advisory
- http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.htmlmailing-list, x-refsource-mlist
- http://www.debian.org/security/2011/dsa-2154vendor-advisory, x-refsource-debian, mailing-list, third-party-advisory
- http://www.securityfocus.com/archive/1/515172/100/0/threadedmailing-list, x-refsource-bugtraq, broken-link, third-party-advisory, vdb-entry
- http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/x-refsource-misc, press/media-coverage, third-party-advisory
- http://www.vupen.com/english/advisories/2011/0245vdb-entry, x-refsource-vupen
- http://www.vupen.com/english/advisories/2011/0135vdb-entry, x-refsource-vupen, broken-link
- http://www.ubuntu.com/usn/USN-1060-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://www.vupen.com/english/advisories/2010/3204vdb-entry, x-refsource-vupen, broken-link, vendor-advisory
- http://bugs.exim.org/show_bug.cgi?id=1044x-refsource-confirm, issue-tracking, patch
- http://www.debian.org/security/2010/dsa-2131vendor-advisory, x-refsource-debian, mailing-list, third-party-advisory
- http://www.vupen.com/english/advisories/2010/3171vdb-entry, x-refsource-vupen, broken-link, vendor-advisory
- http://openwall.com/lists/oss-security/2010/12/10/1mailing-list
- http://www.cpanel.net/2010/12/critical-exim-security-update.htmlbroken-link
- http://www.openwall.com/lists/oss-security/2021/05/04/7mailing-list
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.