Servers and applications
CVE-2011-0017 The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
Severity Medium 6.9
Published 2 Feb 2011
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 0.4% in the next 30 daysHigher than 32% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Needs local access · No login needed
Attacker can Read data · Change data · Take it down
CVSS vector AV:L/AC:M/Au:N/C:C/I:C/A:C
Sources NVD Affected software Software Affected versions EximServers and applications · cpe:a:exim:exim Version 4.71 Version 4.70 Version 4.69 Version 4.68 All 67 release lines Every version up to 4.72 Version 2.10 Version 2.11 Version 2.12 Version 3.00 Version 3.01 Version 3.02 Version 3.03 Version 3.10 Version 3.11 Version 3.12 Version 3.13 Version 3.14 Version 3.15 Version 3.16 Version 3.20 Version 3.21 Version 3.22 Version 3.30 Version 3.31 Version 3.32 Version 3.33 Version 3.34 Version 3.35 Version 3.36 Version 4.00 Version 4.01 Version 4.02 Version 4.03 Version 4.04 Version 4.05 Version 4.10 Version 4.11 Version 4.12 Version 4.14 Version 4.20 Version 4.21 Version 4.22 Version 4.23 Version 4.24 Version 4.30 Version 4.31 Version 4.32 Version 4.33 Version 4.34 Version 4.40 Version 4.41 Version 4.42 Version 4.43 Version 4.44 Version 4.50 Version 4.51 Version 4.52 Version 4.53 Version 4.54 Version 4.60 Version 4.61 Version 4.62 Version 4.63 Version 4.64 Version 4.65 Version 4.66 Version 4.67 Version 4.68 Version 4.69 Version 4.70 Version 4.71
References NVD https://nvd.nist.gov/vuln/detail/CVE-2011-0017 CVE.org https://www.cve.org/CVERecord?id=CVE-2011-0017