CVE-2016-1531

Description

References

• lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html
• packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Escalation.html · Exploit
• debian.org/security/2016/dsa-3517
• exim.org/static/doc/CVE-2016-1531.txt · Third Party Advisory
• rapid7.com/db/modules/exploit/unix/local/exim_perl_startup
• securitytracker.com/id/1035512
• ubuntu.com/usn/USN-2933-1
• exploit-db.com/exploits/39535 · Exploit
• exploit-db.com/exploits/39549
• exploit-db.com/exploits/39702

More vulnerabilities in exim

• CVE-2026-94057MEDIUM 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056HIGH 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055MEDIUM 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054MEDIUM 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141HIGH 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.