CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

DEBIAN-CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

Code injection

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

CVE-2016-1531

Exim before 4.86.2 that is installed with setuid root and exposes the perl_startup configuration parameter is vulnerable to local privilege escalation, allowing an unprivileged user to gain root privileges. Public details from multiple sources (EDB exploits and Debian advisories) confirm the root...

CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

Ubuntu 14.04 LTS : Exim vulnerabilities (USN-2933-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2933-1 advisory. It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was...

USN-2933-1: Exim vulnerabilities

It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was enabled, a local attacker could use this issue to escalate their privileges to the root user. This issue has been fixed by having Exim clean th...

Exim < 4.86.2 Local Root / Privilege Escalation Vulnerability

Exim is prone to a local root privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...

Fedora Update for exim FEDORA-2016-0

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : exim-4.86.2-1.fc23 (2016-e062971917)

This is new version fixing local privilege escalation for set-uid root when using perlstartup. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 22 : exim-4.85.2-1.fc22 (2016-0e3ca94d88)

This is new version fixing local privilege escalation for set-uid root when using perlstartup. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

[SECURITY] Fedora 22 Update: exim-4.85.2-1.fc22

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

[SECURITY] Fedora 23 Update: exim-4.86.2-1.fc23

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

openSUSE: Security Advisory for exim (openSUSE-SU-2016:0721-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for exim (important)

This update to exim 4.86.2 fixes the following issues: CVE-2016-1531: local privilege escalation for set-uid root exim when using 'perlstartup' boo968844 Important: Exim now cleans the complete execution environment by default. This affects Exim and subprocesses such as transports calling other...

exim: privilege escalation

All installations having Exim set-uid root and using 'perlstartup' are vulnerable to a local privilege escalation. Any user who can start an instance of Exim and this is normally any user can gain root privileges...

Exim Local Privilege Escalation

============================================= - Advisory release date: 10.03.2016 - Created by: Dawid Golunski - Severity: High/Critical ============================================= I. VULNERABILITY ------------------------- Exim 4.86.2 Local Root Privilege Escalation Exploit II. BACKGROUND...

Exim "perl_startup" Privilege Escalation

This module exploits a Perl injection vulnerability in Exim use exploit/unix/local/exim/perlstartup msf undefinedperlstartup show actions ...actions... msf undefinedperlstartup set ACTION msf undefinedperlstartup show options ...show and set options... msf undefinedperlstartup run This module...

Exim < 4.86.2 - Privilege Escalation

Exploit for linux platform in category local exploits ============================================= - Advisory release date: 10.03.2016 - Created by: Dawid Golunski - Severity: High/Critical ============================================= I. VULNERABILITY ------------------------- Exim 4.86.2 Local...