{"id":"CVE-2010-4345","kind":"vulnerability","aliases":["CVE-2010-4345"],"related":[],"title":"Exim Exim: Exim Privilege Escalation Vulnerability","description":"Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.","summary":"Exim, the mail transfer agent, lets a local user who already has the exim account specify an alternate configuration file containing arbitrary commands. An attacker who gets local access can run commands as the exim user and escalate privileges.","severity":"high","cvss":7.8,"epss":0.17965,"exploited":true,"exploited_at":"2022-03-25T00:00:00+00:00","products":[{"name":"Exim Exim","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exim","exploited","linux","package","self-hosted"],"not_affected_if":["managed-hosting","no-local-user-access"],"how_to_check":null,"fix":"Apply the vendor update per Exim's instructions; the sources do not name the fixed version.","status":"open","published_at":"2010-12-14T16:00:04+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:22:05+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T21:22:05Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor update per Exim's instructions; the sources do not name the fixed version.","reach":"local","impact":"high","summary":"Exim, the mail transfer agent, lets a local user who already has the exim account specify an alternate configuration file containing arbitrary commands. An attacker who gets local access can run commands as the exim user and escalate privileges.","category":"package","who_cares":["exim","self-hosted","linux"],"confidence":0.6,"needs_auth":"yes","worst_case":"Local user escalates privileges by running commands via config file","analyst_note":"Find the affected and fixed Exim versions and the privilege-escalation details at the NVD or Exim advisory for CVE-2010-4345; the sources do not give them.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["managed-hosting","no-local-user-access"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00045,"input_tokens":2822,"output_tokens":336,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2010':8A,11A '-4345':9A,12A '4.72':62C 'abil':74C 'access':50B 'account':36B,79C 'agent':26B 'allow':65C 'alreadi':32B 'altern':39B,83C 'arbitrari':43B,91C 'attack':46B 'command':44B,53B,92C 'configur':40B,84C 'contain':42B,90C 'cve':7A,10A 'demonstr':94C 'direct':88C,99C 'directori':98C 'earlier':64C 'escal':5A,59B 'exim':1A,2A,3A,13A,14A,15B,22B,35B,56B,61C,77C 'exploit':16B 'file':41B,85C 'gain':69C 'get':48B 'host':21B 'let':27B 'leverag':72C 'linux':17B 'local':29B,49B,66C 'mail':24B 'packag':18B 'privileg':4A,60B,70C 'run':52B 'self':20B 'self-host':19B 'specifi':37B,81C 'spool':97C 'transfer':25B 'user':30B,57B,67C,78C 'vulner':6A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2010-12-14T16:00:04+00:00","kev":{"dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2010-4345","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-4345","severity":null,"published_at":"2022-03-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:07+00:00","note":null},{"source":"epss","external_id":"CVE-2010-4345","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-4345","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2010-4345","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4345","severity":null,"published_at":"2010-12-14T16:00:04+00:00","modified_at":"2026-06-16T23:24:36+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}