CVE-2016-1531

moderate-risk
Published 2016-04-07

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

Do I need to act?

!
56.8% chance of exploitation in next 30 days
EPSS score — higher than 43% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
3 public exploits available
39702, 39535, 39549
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.0/10 High
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Exim

References (20)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html
Exploit http://packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Esc...
http://www.debian.org/security/2016/dsa-3517
Third Party Advisory http://www.exim.org/static/doc/CVE-2016-1531.txt
http://www.rapid7.com/db/modules/exploit/unix/local/exim_perl_startup
http://www.securitytracker.com/id/1035512
http://www.ubuntu.com/usn/USN-2933-1
Exploit https://www.exploit-db.com/exploits/39535/
https://www.exploit-db.com/exploits/39549/
https://www.exploit-db.com/exploits/39702/
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html
Exploit http://packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Esc...
http://www.debian.org/security/2016/dsa-3517
Third Party Advisory http://www.exim.org/static/doc/CVE-2016-1531.txt
http://www.rapid7.com/db/modules/exploit/unix/local/exim_perl_startup
http://www.securitytracker.com/id/1035512
http://www.ubuntu.com/usn/USN-2933-1
Exploit https://www.exploit-db.com/exploits/39535/
https://www.exploit-db.com/exploits/39549/
https://www.exploit-db.com/exploits/39702/
48
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 25/34 · High
Exposure 5/34 · Minimal