CVE-2020-28007

CVE-2020-28007 describes a privilege escalation vulnerability in Exim versions prior to 4.94.2. This flaw allows a local attacker to overwrite critical root-owned files by exploiting Exim's operation as root within a non-root-owned log directory, leveraging symlink or hard link attacks. With a CVSS score of 7.8 (High), the vulnerability has a low attack complexity and requires local user privileges, but can lead to high impact on confidentiality, integrity, and availability. While there is no known active exploitation (KEV list), no public exploit code (Metasploit, Nuclei, ExploitDB), and a low EPSS score, the vulnerability has garnered significant community discussion and media coverage, indicating awareness of its potential severity.