Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0052. PoCs published by Elias Levy, dildog.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in userhelper and PAM on Red Hat 6.0/6.1 and Mandrake 6.1 to execute arbitrary code with root privileges. It creates a malicious shared library and PAM configuration file to achieve local privilege escalation.
Description
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.
Exploits (2)
This exploit leverages a path traversal vulnerability in userhelper and PAM on Red Hat 6.0/6.1 and Mandrake 6.1 to execute arbitrary code with root privileges. It creates a malicious shared library and PAM configuration file to achieve local privilege escalation.
This exploit leverages a path traversal vulnerability in userhelper and PAM to execute arbitrary code with root privileges. It creates a malicious shared library and configuration file, then uses userhelper to trigger PAM to load the library, resulting in a root shell.