CVE-2010-2024: transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change perm...

Security readout for executives and security teams

This vulnerability affects older Exim mail servers. If a server runs Exim before 4.72 and has MBX locking enabled, a local user may be able to abuse temporary lockfile handling to change or create files, causing outage risk and possibly privilege gain. Exposure is most likely on legacy Unix/Linux mail hosts running Exim before 4.72, using local delivery with MBX locking enabled, and allowing local user access. Internet exposure alone is not enough based on the provided sources. Treat this as a targeted legacy-mail-server risk, not a broad internet worm scenario. Prioritize shared or multi-user mail systems first, especially where Exim is old and local users can access the host. Mitigation focus: Upgrade Exim to 4.72 or a vendor-supported fixed package.; Review distribution advisories for backported fixes on older package versions.; Limit local account access on affected mail hosts while remediation is pending..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.