CVE-2010-2023
CVE-2010-2023 · MEDIUM Severity
AV:L/AC:M/AU:N/C:P/I:P/A:P
transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.
Learn more about our User Device Pen Test.