CVE-2010-4345
HIGH KEVExim4 string_format Function Heap Buffer Overflow
Title source: metasploitExploitation Summary
CVE-2010-4345 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022.
EIP tracks 2 public exploits from researchers including Metasploit, jduck, hdm, including a Metasploit module exploits/unix/smtp/exim4_string_format.
AI-analyzed exploit summary This Metasploit module exploits a heap buffer overflow in Exim versions prior to 4.69 via a crafted email message, leading to remote code execution. It also attempts local privilege escalation via CVE-2010-4345 if Perl is available.
Description
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Exploits (2)
This Metasploit module exploits a heap buffer overflow in Exim versions prior to 4.69 via a crafted email message, leading to remote code execution. It also attempts local privilege escalation via CVE-2010-4345 if Perl is available.
This Metasploit module exploits a heap buffer overflow in Exim (CVE-2010-4344) by sending a crafted email message to corrupt heap memory and execute arbitrary commands. It also attempts local privilege escalation via CVE-2010-4345 if Perl is available.
References (29)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H