onyx --cves cve-2016-1531
CVE-2016-1531
- score
- <0.1
- cvss
- 7.0
- epss
- 6.3%
- published
- 2016-04-07
- kev added
- —
- first seen
Exim before 4.86.2, when installed setuid root, contains a privilege escalation caused by insecure handling of the perl_startup argument, letting local users gain root privileges, exploit requires local user access.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC https://www.exploit-db.com/exploits/39549/
Exploit availability
Weaknesses
References 10
- http://www.debian.org/security/2016/dsa-3517
- http://www.securitytracker.com/id/1035512
- https://www.exploit-db.com/exploits/39549/
- https://www.exploit-db.com/exploits/39702/
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html
- http://www.rapid7.com/db/modules/exploit/unix/local/exim_perl_startup
- http://www.ubuntu.com/usn/USN-2933-1
- http://packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Escalation.html
- https://www.exploit-db.com/exploits/39535/
- http://www.exim.org/static/doc/CVE-2016-1531.txt