2014-09-04 19:55:05 2016-12-03 04:01:06

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Vector

LOCAL

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
University of Cambridge Exim 4.42 University of Cambridge Exim 4.03 University of Cambridge Exim 4.04 University of Cambridge Exim 4.01 University of Cambridge Exim 4.82 University of Cambridge Exim 4.43 University of Cambridge Exim 4.00 University of Cambridge Exim 4.44 University of Cambridge Exim 4.41 University of Cambridge Exim 4.40 University of Cambridge Exim 4.80.1 University of Cambridge Exim 4.82.1 University of Cambridge Exim 4.80 University of Cambridge Exim 4.24 University of Cambridge Exim 4.68 University of Cambridge Exim 4.53 University of Cambridge Exim 4.14 University of Cambridge Exim 4.12 University of Cambridge Exim 4.10 University of Cambridge Exim 4.54 University of Cambridge Exim 4.11 University of Cambridge Exim 4.52 University of Cambridge Exim 4.50 University of Cambridge Exim 4.51 University of Cambridge Exim 4.20 University of Cambridge Exim 4.64 University of Cambridge Exim 4.69 University of Cambridge Exim 4.23 University of Cambridge Exim 4.67 University of Cambridge Exim 4.60 University of Cambridge Exim 4.21 University of Cambridge Exim 4.65 University of Cambridge Exim 4.22 University of Cambridge Exim 4.66 University of Cambridge Exim 4.63 University of Cambridge Exim 4.61 University of Cambridge Exim 4.62 University of Cambridge Exim 4.02 University of Cambridge Exim 4.31 University of Cambridge Exim 4.75 University of Cambridge Exim 4.34 University of Cambridge Exim 4.71 University of Cambridge Exim 4.32 University of Cambridge Exim 4.76 University of Cambridge Exim 4.33 University of Cambridge Exim 4.77 University of Cambridge Exim 4.30 University of Cambridge Exim 4.74 University of Cambridge Exim 4.72 University of Cambridge Exim 4.73 University of Cambridge Exim 4.70 University of Cambridge Exim 4.05