CVE-2010-4345

Local users can escalate privileges in Exim by executing arbitrary commands via alternate configuration files.

This privilege escalation flaw allows local attackers to run arbitrary commands, bypassing intended access controls. DIB organizations must patch Exim immediately and restrict local user privileges to prevent lateral movement and compliance violations. The vulnerability is actively exploited in the wild, indicating a high risk of compromise.

Shame score — A known privilege escalation flaw in a widely deployed mail server was actively exploited in the wild, demonstrating severe negligence in patch management and security hygiene.