Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-1167. PoCs published by b0f.
AI-analyzed exploit summary This exploit leverages a PATH environment variable manipulation in kpopup to execute a malicious 'killall' script, which compiles and executes a setuid root shell. It is a local privilege escalation exploit targeting vulnerable versions of kpopup.
Description
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.
Exploits (1)
This exploit leverages a PATH environment variable manipulation in kpopup to execute a malicious 'killall' script, which compiles and executes a setuid root shell. It is a local privilege escalation exploit targeting vulnerable versions of kpopup.