Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-2961. PoCs published by fuzz.
AI-analyzed exploit summary This exploit leverages a udev rule injection vulnerability (CVE-2010-2961) to execute arbitrary code with root privileges. It creates a malicious udev rule that triggers a shell script to set the SUID bit on a compiled binary containing shellcode, leading to local privilege escalation.
Description
mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.
Exploits (1)
This exploit leverages a udev rule injection vulnerability (CVE-2010-2961) to execute arbitrary code with root privileges. It creates a malicious udev rule that triggers a shell script to set the SUID bit on a compiled binary containing shellcode, leading to local privilege escalation.