Vulnerability Details CVE-2021-27216
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.9%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 6.3
Products affected by CVE-2021-27216
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
cpe:2.3:a:exim:exim:4.80.1
-
-
cpe:2.3:a:exim:exim:4.82.1
-
cpe:2.3:a:exim:exim:4.84.2
-
-
cpe:2.3:a:exim:exim:4.85.1
-
cpe:2.3:a:exim:exim:4.85.2
-
-
cpe:2.3:a:exim:exim:4.86.1
-
cpe:2.3:a:exim:exim:4.86.2
-
-
cpe:2.3:a:exim:exim:4.87.1
-
-
-
cpe:2.3:a:exim:exim:4.89.1
-
-
cpe:2.3:a:exim:exim:4.90.0.22
-
cpe:2.3:a:exim:exim:4.90.0.27
-
cpe:2.3:a:exim:exim:4.90.1
-
-
-
cpe:2.3:a:exim:exim:4.92.1
-
cpe:2.3:a:exim:exim:4.92.2
-
-
cpe:2.3:a:exim:exim:4.93.0.4
-
cpe:2.3:a:exim:exim:4.93.0.4-3.1
-
-
cpe:2.3:a:exim:exim:4.94.1