| Package | Affected versions | Patched versions |
|---|---|---|
| exim | = 4.10= 4.20= 4.21= 4.22= 4.23= 4.24= 4.30= 4.31= 4.32= 4.33= 4.34= 4.40= 4.41= 4.42= 4.43= 4.44= 4.50= 4.51= 4.52= 4.53= 4.54= 4.60= 4.61= 4.62= 4.63= 4.64= 4.65= 4.66= 4.67= 4.68= 4.69= 4.70≤ 4.71 |
transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free