CVE-2010-2023

CVE-2010-2023 describes a vulnerability in Exim versions prior to 4.72, specifically in the transports/appendfile.c component. When a world-writable sticky-bit mail directory is in use, the software fails to verify the st_nlink field of mailbox files, allowing local attackers to create hard links to other users' files. This can lead to a denial of service or potential privilege escalation. The vulnerability has a CVSS score of 4.4, indicating a low attack complexity and requiring local access, with potential impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. While there is some community discussion, it is not indicative of widespread exploitation.