CVE-2016-1531

This Metasploit module exploits a Perl injection vulnerability in Exim versions prior to 4.86.2 by leveraging the 'perl_startup' configuration parameter to execute arbitrary commands with root privileges.

This exploit leverages an unsanitized PERL5OPT environment variable in Exim to execute arbitrary Perl code with root privileges via the embedded Perl interpreter. The attack abuses the -ps flag to force early Perl execution before privilege dropping.

This exploit leverages a local privilege escalation vulnerability in Exim (CVE-2016-1531) by manipulating the Perl environment to load a malicious module, granting root access. The script creates a Perl module that spawns a shell and executes Exim with the manipulated environment.

This repository contains a functional local privilege escalation exploit for CVE-2016-1531, targeting Exim versions <= 4.84-3. The exploit manipulates the Perl environment to load a malicious module, granting root access.

This Metasploit module exploits a Perl injection vulnerability in Exim versions prior to 4.86.2 by leveraging the 'perl_startup' configuration parameter to execute arbitrary commands with root privileges.