Unrated severityNVD Advisory· Published Jun 7, 2010· Updated Apr 29, 2026
CVE-2010-2024
CVE-2010-2024
Description
transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.
Affected products
33cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*+ 32 more
- cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*range: <=4.71
- cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:*
- cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
18- bugs.exim.org/show_bug.cginvdPatch
- vcs.exim.org/viewvc/exim/exim-src/src/transports/appendfile.cnvdPatch
- secunia.com/advisories/40019nvdVendor Advisory
- archives.neohapsis.com/archives/fulldisclosure/2010-06/0079.htmlnvd
- lists.exim.org/lurker/message/20100524.175925.9a69f755.en.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-June/042587.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-June/042613.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlnvd
- secunia.com/advisories/40123nvd
- secunia.com/advisories/43243nvd
- vcs.exim.org/viewvc/exim/exim-doc/doc-txt/ChangeLognvd
- www.securityfocus.com/archive/1/511653/100/0/threadednvd
- www.securityfocus.com/bid/40454nvd
- www.ubuntu.com/usn/USN-1060-1nvd
- www.vupen.com/english/advisories/2010/1402nvd
- www.vupen.com/english/advisories/2011/0364nvd
- bugzilla.redhat.com/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/59042nvd
News mentions
0No linked articles in our index yet.