CVE-2016-1531 Privilege escalation in n/a
Local attackers can gain root privileges on Exim mail servers installed with setuid root permissions via the perl_startup argument.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-1531?
CVE-2016-1531 is a high-severity vulnerability in Exim Exim, published on 7 Apr 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
Weakness: CWE-264
Which versions are affected by CVE-2016-1531?
It affects 1 product.
Products include Exim Exim.
How do I fix CVE-2016-1531?
Upgrade to a fixed version.
Is CVE-2016-1531 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-1531 exists.
Public exploit code: 1 Metasploit module, 3 Exploit-DB entries and 1 proofs of concept on GitHub.
Other vulnerabilities in Exim Exim
Sources
Also known as DEBIAN-CVE-2016-1531, DSA-3517-1, GHSA-qqgw-xrxj-r5fc, UBUNTU-CVE-2016-1531.