| Package | Affected versions | Patched versions |
|---|---|---|
| exim | = 4.10= 4.20= 4.21= 4.22= 4.23= 4.24= 4.30= 4.31= 4.32= 4.33= 4.34= 4.40= 4.41= 4.42= 4.43= 4.44= 4.50= 4.51= 4.52= 4.53= 4.54= 4.60= 4.61= 4.62= 4.63= 4.64= 4.65= 4.66= 4.67= 4.68= 4.69= 4.70≤ 4.71 |
transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free