Exploitation Summary
EIP tracks 5 public exploits for CVE-2016-1531.
PoCs published by Metasploit, Dawid Golunski, Hacker Fantastic, including Metasploit module exploits/unix/local/exim_perl_startup.
AI-analyzed exploit summary This Metasploit module exploits a Perl injection vulnerability in Exim versions prior to 4.86.2 by leveraging the 'perl_startup' configuration parameter to execute arbitrary commands with root privileges.
Description
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
Exploits (5)
This Metasploit module exploits a Perl injection vulnerability in Exim versions prior to 4.86.2 by leveraging the 'perl_startup' configuration parameter to execute arbitrary commands with root privileges.
This exploit leverages an unsanitized PERL5OPT environment variable in Exim to execute arbitrary Perl code with root privileges via the embedded Perl interpreter. The attack abuses the -ps flag to force early Perl execution before privilege dropping.
This exploit leverages a local privilege escalation vulnerability in Exim (CVE-2016-1531) by manipulating the Perl environment to load a malicious module, granting root access. The script creates a Perl module that spawns a shell and executes Exim with the manipulated environment.
This repository contains a functional local privilege escalation exploit for CVE-2016-1531, targeting Exim versions <= 4.84-3. The exploit manipulates the Perl environment to load a malicious module, granting root access.
This Metasploit module exploits a Perl injection vulnerability in Exim versions prior to 4.86.2 by leveraging the 'perl_startup' configuration parameter to execute arbitrary commands with root privileges.
References (10)
Scores
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H