CVE-2010-0832
libpam-modules <1.1.0-2ubuntu1.1/1.1.1-2ubuntu5 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-0832. PoCs published by anonymous, Kristian Erik Hermansen, R3fr4kt.
AI-analyzed exploit summary This exploit leverages a vulnerability in Ubuntu PAM MOTD to escalate privileges to root by manipulating /etc/passwd and /etc/shadow via symlink attacks and SSH key manipulation. It adds a temporary user 'toor' with UID 0 and a known password hash.
Description
pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user file stamps" and the motd.legal-notice file.
Exploits (3)
This exploit leverages a vulnerability in Ubuntu PAM MOTD to escalate privileges to root by manipulating /etc/passwd and /etc/shadow via symlink attacks and SSH key manipulation. It adds a temporary user 'toor' with UID 0 and a known password hash.
This exploit leverages a vulnerability in Ubuntu PAM (Pluggable Authentication Modules) to tamper with the MOTD (Message of the Day) file, allowing local privilege escalation. It manipulates symbolic links in the user's cache directory to gain ownership of arbitrary files upon re-authentication.
This is a detailed technical writeup for HackTheBox's 'Popcorn' machine, covering reconnaissance, web exploitation via file upload evasion, and local privilege escalation using CVE-2010-0832 (PAM MOTD flaw). It includes step-by-step exploitation techniques and post-exploitation stabilization methods.