CVE-2010-4170
SystemTap 1.3 - Privilege Escalation via MODPROBE_OPTIONS Environment Variable
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-4170.
PoCs published by Metasploit, Tavis Ormandy, Tavis Ormandy, bcoles, including Metasploit module exploits/linux/local/systemtap_modprobe_options_priv_esc.
AI-analyzed exploit summary This Metasploit module exploits CVE-2010-4170, a privilege escalation vulnerability in SystemTap's `staprun` executable. It leverages the `MODPROBE_OPTIONS` environment variable to execute arbitrary commands with root privileges by injecting a malicious configuration file.
Description
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.
Exploits (3)
This Metasploit module exploits CVE-2010-4170, a privilege escalation vulnerability in SystemTap's `staprun` executable. It leverages the `MODPROBE_OPTIONS` environment variable to execute arbitrary commands with root privileges by injecting a malicious configuration file.
This exploit leverages a vulnerability in the Linux kernel's handling of the MODPROBE_OPTIONS environment variable to execute arbitrary commands with elevated privileges. It creates a malicious configuration file to spawn a shell when the 'uprobes' module is loaded via staprun.
This Metasploit module exploits a privilege escalation vulnerability in SystemTap's `staprun` executable (CVE-2010-4170) by leveraging the `MODPROBE_OPTIONS` environment variable to execute arbitrary commands with root privileges.