CVE-2014-2972

Publication date

2014-09-04 17:00:00

Family

certcc

State

PUBLISHED

Description

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.