CVE-2016-1531

HIGH

Exim <4.86.2 - Privilege Escalation

Title source: llm

Description

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

Exploits (5)

nomisec WORKING POC
by h3x0v3rl0rd · poc
https://github.com/h3x0v3rl0rd/CVE-2016-1531
exploitdb WORKING POC VERIFIED
by Metasploit · rubylocallinux
https://www.exploit-db.com/exploits/39702
exploitdb WORKING POC VERIFIED
by Hacker Fantastic · bashlocallinux
https://www.exploit-db.com/exploits/39535
exploitdb WORKING POC VERIFIED
by Dawid Golunski · textlocallinux
https://www.exploit-db.com/exploits/39549
metasploit WORKING POC EXCELLENT
by Dawid Golunski, wvu · rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/exim_perl_startup.rb

Scores

CVSS v3 7.0
EPSS 0.5426
EPSS Percentile 98.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-264
Status draft

Affected Products (1)

exim/exim < 4.86

Timeline

Published Apr 07, 2016
Tracked Since Feb 18, 2026