CVE-2011-0017 in Server
요약 (영어)
The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
예약하다
2010. 12. 07.
공개
2011. 02. 01.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 4280 | Exim Server open_log 권한 상승 | 59 | 정의되지 않음 | 공식 수정 | CVE-2011-0017 |