vulnerability

Exim: Arbitrary file creation and clobbering (CVE-2020-28014)

Try Surface Command
Back to search
Severity
6
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:C)
Published
2021-05-06
Added
2021-05-13
Modified
2021-05-13

Description

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten.

Solution

exim-upgrade-4_94_2

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today