CVE-2010-2023

Publication date 7 June 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.

Read the notes from the security team

Status

Package Ubuntu Release Status
exim4 10.10 maverick
Fixed 4.72-1ubuntu1
10.04 LTS lucid
Fixed 4.71-3ubuntu1.1
9.10 karmic
Fixed 4.69-11ubuntu4.2
9.04 jaunty Ignored end of life
8.04 LTS hardy
Fixed 4.69-2ubuntu0.3
6.06 LTS dapper
Fixed 4.60-3ubuntu3.3

Notes

mdeslaur

not default configuration

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
exim4