CVE-2011-2777
acpid2 < 2.0.16 - Privilege Escalation via pidof Mismanagement
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-2777. PoCs published by otr.
AI-analyzed exploit summary This exploit leverages a privilege boundary crossing vulnerability in acpid (CVE-2011-2777) by manipulating the DBUS_SESSION_BUS_ADDRESS environment variable to inject arbitrary shell commands. It creates a fake kded4 process and a payload binary to escalate privileges when the power button is pressed.
Description
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUS_SESSION_BUS_ADDRESS environment variable containing commands.
Exploits (1)
This exploit leverages a privilege boundary crossing vulnerability in acpid (CVE-2011-2777) by manipulating the DBUS_SESSION_BUS_ADDRESS environment variable to inject arbitrary shell commands. It creates a fake kded4 process and a payload binary to escalate privileges when the power button is pressed.