Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6210. PoCs published by Bas van Schaik.
AI-analyzed exploit summary This exploit demonstrates a local privilege escalation (LPE) by leveraging improper setuid/setgid handling in the target software. It spawns a shell with elevated privileges by calling setuid/setgid on a user 'abi' and then executing /usr/bin/id to verify the privilege change.
Description
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.
Exploits (1)
This exploit demonstrates a local privilege escalation (LPE) by leveraging improper setuid/setgid handling in the target software. It spawns a shell with elevated privileges by calling setuid/setgid on a user 'abi' and then executing /usr/bin/id to verify the privilege change.