6 matches found
SUSE CVE-2016-1531
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...
DEBIAN-CVE-2016-1531
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...
USN-2933-1 exim4 vulnerabilities
It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was enabled, a local attacker could use this issue to escalate their privileges to the root user. This issue has been fixed by having Exim clean th...
Security update for exim (important)
This update to exim 4.86.2 fixes the following issues: CVE-2016-1531: local privilege escalation for set-uid root exim when using 'perlstartup' boo968844 Important: Exim now cleans the complete execution environment by default. This affects Exim and subprocesses such as transports calling other...
PT-2016-4852
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.86.2 Description The issue allows local users to gain privileges through the perl startup argument when Exim is installed setuid root. Recommendations For versions prior to 4.86.2, update to version 4.86.2 or later to...