Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-10022.
PoCs published by HTP, HTP, juan vazquez, including Metasploit module exploits/linux/local/kloxo_lxsuexec.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in Kloxo (Lxadmin) by manipulating environment variables and abusing the lxsuexec binary to execute a shell with elevated privileges. It requires the attacker to be the Apache user or another user capable of running lxsuexec.
Description
Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48. The lxsuexec binary performs a uid check and permits execution of arbitrary commands as root if the invoking user matches uid 48. This flaw enables attackers with Apache-level access to escalate privileges to root without authentication.
Exploits (2)
This exploit leverages a local privilege escalation vulnerability in Kloxo (Lxadmin) by manipulating environment variables and abusing the lxsuexec binary to execute a shell with elevated privileges. It requires the attacker to be the Apache user or another user capable of running lxsuexec.
This Metasploit module exploits a local privilege escalation vulnerability in Kloxo versions 6.1.12 and earlier by abusing setuid root binaries (lxsuexec and lxrestart) to escalate from uid 48 (Apache) to root. It writes a payload executable to /tmp, sets environment variables, and executes the payload via the vulnerable binary.
References (6)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X