Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-10936. PoCs published by tnpitsecurity.
AI-analyzed exploit summary The repository provides a functional exploit for CVE-2020-10936, demonstrating a privilege escalation vulnerability in Sympa's setuid binaries. The exploit leverages environment variable manipulation (PERLLIB/PERL5LIB) to inject malicious Perl modules, escalating privileges from a standard user to root.
Description
Sympa before 6.2.56 allows privilege escalation.
Exploits (1)
The repository provides a functional exploit for CVE-2020-10936, demonstrating a privilege escalation vulnerability in Sympa's setuid binaries. The exploit leverages environment variable manipulation (PERLLIB/PERL5LIB) to inject malicious Perl modules, escalating privileges from a standard user to root.
References (8)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H