CVE-2019-3010

This exploit leverages a design error in xscreensaver on Solaris 11.x, allowing local privilege escalation by abusing the -log command line switch to write arbitrary files. It compiles a shared library to override getuid() and uses LD_PRELOAD to escalate privileges to root.

This exploit leverages a vulnerability in Oracle Solaris 11's XScreenSaver component to achieve local privilege escalation by manipulating the `getuid` function via `LD_PRELOAD`. The exploit compiles a shared library to override `getuid`, starts an X server, and triggers the vulnerability to gain root access.

This repository contains functional exploit code for CVE-2019-3010, specifically targeting Solaris 11.x via xscreensaver for local privilege escalation. The exploits are well-documented and include multiple variants for different architectures and vulnerabilities.

This Metasploit module exploits a privilege escalation vulnerability in `xscreensaver` (CVE-2019-3010) on Solaris 11 by creating a user-owned log file in a secure directory, overwriting it with a malicious shared object, and executing it via `LD_PRELOAD`.