Exploitation Summary
EIP tracks 3 public exploits for CVE-2014-2630.
PoCs published by redtimmysec, redtimmy, h00die, Tim Brown, Robert Jaroszuk, Marco Ortisi, including Metasploit module exploits/linux/local/hp_xglance_priv_esc.
AI-analyzed exploit summary This exploit targets CVE-2014-2630, a privilege escalation vulnerability in Hewlett-Packard Performance Monitoring for Open System Environments (xglance-bin 11.00). It leverages a shared library injection technique to escalate privileges by setting the effective user ID to root and spawning a shell.
Description
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.
Exploits (3)
This exploit targets CVE-2014-2630, a privilege escalation vulnerability in Hewlett-Packard Performance Monitoring for Open System Environments (xglance-bin 11.00). It leverages a shared library injection technique to escalate privileges by setting the effective user ID to root and spawning a shell.
This exploit leverages CVE-2014-2630, a vulnerability in HP Performance Monitoring's `xglance-bin` SUID binary, to escalate privileges to root. It uses a shared library injection technique to execute a shell with elevated privileges.
This Metasploit module exploits CVE-2014-2630, a privilege escalation vulnerability in HP Performance Monitoring's xglance-bin due to an insecure RPATH. It leverages a relative path to inject a malicious shared library, escalating privileges to root.