CVE-2014-2533

This Metasploit module exploits a privilege escalation vulnerability in QNX's ifwatchd (CVE-2014-2533) by leveraging its failure to drop privileges when executing user-supplied scripts via the '-A' argument. It writes a malicious script to a writable directory and triggers it using ifwatchd, resulting in arbitrary command execution as root.

This exploit leverages a privilege escalation vulnerability in QNX's ifwatchd service, which executes user-supplied scripts with root privileges. The script creates a malicious arrival-script that spawns a setuid root shell, then triggers it via ifwatchd.

This Metasploit module exploits a privilege escalation vulnerability in QNX's ifwatchd SUID executable by leveraging the '-A' argument to execute arbitrary commands as root. It writes a malicious script to a writable directory and triggers it via ifwatchd.