CVE-2019-19726

This Metasploit module exploits CVE-2019-19726, a vulnerability in OpenBSD's dynamic loader (`ld.so`) where `LD_LIBRARY_PATH` is not properly reset when set with approximately `ARG_MAX` colons. This allows loading `libutil.so` from an untrusted path via the `chpass` set-uid executable, leading to privileged code execution.

This exploit leverages a vulnerability in OpenBSD's dynamic loader (ld.so) to escalate privileges via a set-user-ID executable (e.g., chpass or passwd). It manipulates LD_LIBRARY_PATH and RLIMIT_DATA to bypass security checks and load a malicious shared library, resulting in root access.

This Metasploit module exploits CVE-2019-19726, a vulnerability in OpenBSD's dynamic loader (`ld.so`) where `LD_LIBRARY_PATH` is not properly reset when set with approximately `ARG_MAX` colons. It abuses the `chpass` set-uid executable to load a malicious `libutil.so` from an untrusted path, achieving local privilege escalation.