CVE-2015-3315

This Metasploit module exploits a race condition in ABRT (CVE-2015-3315) to escalate privileges by changing ownership of /etc/passwd and adding a new root user. It uses a symlink attack on /var/tmp/abrt/*/maps to achieve this.

This exploit leverages a race condition in ABRT (Automatic Bug Reporting Tool) on Fedora 21 to gain ownership of arbitrary files by manipulating symlinks during crash report generation. It uses inotify to monitor ABRT's temporary directory and attempts to replace the 'maps' file with a symlink to the target file.

This Metasploit module exploits a race condition in ABRT (CVE-2015-3315) to escalate privileges by changing ownership of /etc/passwd and adding a new root user. It uses a symlink attack on '/var/tmp/abrt/*/maps' to achieve this.