CVE-2013-10052

EIP tracks 2 public exploits for CVE-2013-10052. PoCs published by Metasploit, sinn3r, juan vazquez, including Metasploit module exploits/linux/local/zpanel_zsudo.

AI-analyzed exploit summary This Metasploit module exploits a local privilege escalation vulnerability in ZPanel's zsudo binary. It writes a payload to a writable directory, makes it executable, and executes it via zsudo to escalate privileges.

ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks. However, when misconfigured in /etc/sudoers, zsudo can be invoked by low-privileged users to execute arbitrary commands as root. This flaw enables local attackers with shell access to escalate privileges by writing a payload to a writable directory and executing it via zsudo. The vulnerability is particularly impactful in post-exploitation scenarios following web server compromise, where the attacker inherits access to zsudo.