CVE-2010-4345

CVE-2010-4345 is a local privilege escalation vulnerability affecting Exim 4.72 and earlier, as well as various distributions like Canonical, Debian, and openSUSE. It allows a local user to gain elevated privileges by manipulating Exim's configuration through the exim user account. This vulnerability carries a high CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability with low attack complexity. Notably, it is listed in CISA's KEV catalog, confirming active exploitation, and exploit code is publicly available, including a Metasploit module. The vulnerability has garnered significant community discussion, with mentions exceeding 99% of all CVEs.