CVE-2010-2023

score

<0.1

cvss

4.4

epss

0.3%

published

2010-06-07

kev added

—

first seen

2026-10-21

Exim before 4.72 contains a denial of service and privilege escalation vulnerability caused by not verifying the st_nlink field of mailbox files in transports/appendfile.c, letting local users create hard links to other users' files, exploit requires a world-writable sticky-bit mail directory.