CVE-2011-0017: Input Validation
Published Feb 2, 2011
·Updated
The openlog function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
Affected Software
67 affected components
Exim Exim<=4.72
Exim Exim=2.10
Exim Exim=2.11
Exim Exim=2.12
Exim Exim=3.00
Exim Exim=3.01
Exim Exim=3.02
Exim Exim=3.03
Exim Exim=3.10
Exim Exim=3.11
Exim Exim=3.12
Exim Exim=3.13
Exim Exim=3.14
Exim Exim=3.15
Exim Exim=3.16
Exim Exim=3.20
Exim Exim=3.21
Exim Exim=3.22
Exim Exim=3.30
Exim Exim=3.31
Exim Exim=3.32
Exim Exim=3.33
Exim Exim=3.34
Exim Exim=3.35
Exim Exim=3.36
Exim Exim=4.00
Exim Exim=4.01
Exim Exim=4.02
Exim Exim=4.03
Exim Exim=4.04
Exim Exim=4.05
Exim Exim=4.10
Exim Exim=4.11
Exim Exim=4.12
Exim Exim=4.14
Exim Exim=4.20
Exim Exim=4.21
Exim Exim=4.22
Exim Exim=4.23
Exim Exim=4.24
Exim Exim=4.30
Exim Exim=4.31
Exim Exim=4.32
Exim Exim=4.33
Exim Exim=4.34
Exim Exim=4.40
Exim Exim=4.41
Exim Exim=4.42
Exim Exim=4.43
Exim Exim=4.44
Exim Exim=4.50
Exim Exim=4.51
Exim Exim=4.52
Exim Exim=4.53
Exim Exim=4.54
Exim Exim=4.60
Exim Exim=4.61
Exim Exim=4.62
Exim Exim=4.63
Exim Exim=4.64
Exim Exim=4.65
Exim Exim=4.66
Exim Exim=4.67
Exim Exim=4.68
Exim Exim=4.69
Exim Exim=4.70
Exim Exim=4.71
Remediation
Event History
Feb 2, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0017?
CVE-2011-0017 is considered a medium severity vulnerability due to its potential impact on system integrity.
2
How do I fix CVE-2011-0017?
To fix CVE-2011-0017, upgrade to Exim version 4.73 or later, where the issue is addressed.
3
Who is affected by CVE-2011-0017?
CVE-2011-0017 affects all versions of Exim prior to 4.73, allowing local users to exploit symlink vulnerabilities.
4
What is the nature of the vulnerability in CVE-2011-0017?
CVE-2011-0017 allows local users to append log data to arbitrary files via a symlink attack due to insufficient return value checks.
5
Is CVE-2011-0017 a remote or local vulnerability?
CVE-2011-0017 is a local vulnerability, exploitable by authenticated local users.