語系:
https://access.redhat.com/security/cve/cve-2010-4344
嚴重性: High
ID: 51133
檔案名稱: redhat-RHSA-2010-0970.nasl
版本: 1.29
類型: local
代理程式: unix
已發布: 2010/12/12
已更新: 2023/4/25
支援的感應器: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
風險因素: Critical
分數: 9.0
風險因素: High
基本分數: 9.3
時間分數: 7.7
媒介: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2010-4344
CPE: cpe:/o:redhat:enterprise_linux:5, p-cpe:/a:redhat:enterprise_linux:exim, cpe:/o:redhat:enterprise_linux:4.7, cpe:/o:redhat:enterprise_linux:4, p-cpe:/a:redhat:enterprise_linux:exim-doc, cpe:/o:redhat:enterprise_linux:5.3, p-cpe:/a:redhat:enterprise_linux:exim-sa, p-cpe:/a:redhat:enterprise_linux:exim-mon, cpe:/o:redhat:enterprise_linux:5.4, cpe:/o:redhat:enterprise_linux:4.8
必要的 KB 項目: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2010/12/10
弱點發布日期: 2010/12/14
CISA 已知遭惡意利用弱點到期日: 2022/4/15
CANVAS (CANVAS)
Core Impact
Metasploit (Exim4 string_format Function Heap Buffer Overflow)
CVE: CVE-2010-4344
BID: 45308
RHSA: 2010:0970