The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade eximUpgrade exim-saUpgrade exim-monUpgrade exim-doc | Dec 1, 2016 | Dec 14, 2010 |
| Debian | — | Upgrade exim4 | Jul 30, 2024 | Dec 14, 2010 |
| Exim | — | Upgrade Exim to version 4.72.0 | Dec 3, 2019 | Dec 14, 2010 |
| Freebsd | — | Upgrade exim | Dec 10, 2025 | Jan 8, 2011 |
| Gentoo Linux | — | Upgrade mail-mta/exim. | Oct 30, 2017 | Dec 14, 2010 |
| Oracle_linux | — | Upgrade exim-saUpgrade eximUpgrade exim-mon | Oct 16, 2024 | Dec 14, 2010 |
| Suse | — | Upgrade eximonUpgrade eximstats-htmlUpgrade exim | Feb 17, 2015 | Dec 14, 2010 |
| Ubuntu | — | Upgrade exim4-daemon-heavyUpgrade exim4-daemon-customUpgrade exim4-daemon-light | Nov 8, 2024 | Dec 14, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub