CVE-2012-10022

This exploit leverages a local privilege escalation vulnerability in Kloxo (Lxadmin) by manipulating environment variables and abusing the lxsuexec binary to execute a shell with elevated privileges. It requires the attacker to be the Apache user or another user capable of running lxsuexec.

This Metasploit module exploits a local privilege escalation vulnerability in Kloxo versions 6.1.12 and earlier by abusing setuid root binaries (lxsuexec and lxrestart) to escalate from uid 48 (Apache) to root. It writes a payload executable to /tmp, sets environment variables, and executes the payload via the vulnerable binary.