CVE-2011-0017

score

<0.1

cvss

6.9

epss

0.4%

published

2011-02-02

kev added

—

first seen

2026-10-21

Exim 4.72 and earlier contains a log file append vulnerability caused by not checking return values from setuid and setgid system calls in open_log, letting local users perform symlink attacks to append data to arbitrary files, exploit requires local user privileges.