CVE-2010-2023

描述

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.

受影響套件(1)

• Debian/exim4from 0, < 4.72-1

參考連結(1)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2010-2023