CVE:CVE-2010-2024
CNNVD:CNNVD-201006-056
Exim是由剑桥大学开发的Unix系统上的邮件传输代理（MTA）。
Exim的transports/appendfile.c存在漏洞，当MBX被启用时， 本地用户可向lockfile in /tmp/发起symlink攻击，修改任意文件的权限，或创建任意文件。
solution:Upgrade exim exim to a higher version than 4.71,4.10,4.20,4.21,4.22,4.23,4.24,4.30,4.31,4.32,4.33,4.34,4.40,4.41,4.42,4.43,4.44,4.50,4.51,4.52,4.53,4.54,4.60,4.61,4.62,4.63,4.64,4.65,4.66,4.67,4.68,4.69,4.70,and avoid the version (,4.71],4.10,4.20,4.21,4.22,4.23,4.24,4.30,4.31,4.32,4.33,4.34,4.40,4.41,4.42,4.43,4.44,4.50,4.51,4.52,4.53,4.54,4.60,4.61,4.62,4.63,4.64,4.65,4.66,4.67,4.68,4.69,4.70