CVE-2010-2023

Publication date 7 June 2010

Last updated 24 July 2024

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
exim4	10.10 maverick	Fixed 4.72-1ubuntu1
	10.04 LTS lucid	Fixed 4.71-3ubuntu1.1
	9.10 karmic	Fixed 4.69-11ubuntu4.2
	9.04 jaunty	Ignored
	8.04 LTS hardy	Fixed 4.69-2ubuntu0.3
	6.06 LTS dapper	Fixed 4.60-3ubuntu3.3

Notes

mdeslaur

not default configuration

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
exim4	Upstream: http://vcs.exim.org/viewvc/exim/exim-src/src/transports/appendfile.c?r1=1.24&r2=1.25 Upstream: a466095

References

Related Ubuntu Security Notices (USN)