Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-2921.
PoCs published by Metasploit, John Lightsey, bcoles, including Metasploit module exploits/linux/local/ktsuss_suid_priv_esc.
AI-analyzed exploit summary This Metasploit module exploits a privilege escalation vulnerability in ktsuss versions 1.4 and prior by leveraging the setuid binary to execute arbitrary commands as root. It uploads a payload to a writable directory and executes it via the vulnerable ktsuss binary.
Description
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Exploits (2)
This Metasploit module exploits a privilege escalation vulnerability in ktsuss versions 1.4 and prior by leveraging the setuid binary to execute arbitrary commands as root. It uploads a payload to a writable directory and executes it via the vulnerable ktsuss binary.
This Metasploit module exploits a privilege escalation vulnerability in ktsuss versions 1.4 and prior by leveraging the setuid binary to execute arbitrary commands with root privileges. It uploads a payload to a writable directory and executes it via the vulnerable ktsuss binary.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H