VULNERABILITY INTELLIGENCE
CVE-2010-2024
CVSS score4.4 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2010-06-07
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')