Exploitation Summary
EIP tracks 9 public exploits for CVE-2022-37706.
PoCs published by nu11secur1ty, MaherAzzouzi, ECU-10525611-Xander, including Metasploit module exploits/linux/local/ubuntu_enlightenment_mount_priv_esc.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Enlightenment's setuid binary (enlightenment_sys) to escalate privileges by manipulating pathnames starting with /dev/.., ultimately spawning a root shell.
Description
enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.
Exploits (9)
This exploit leverages a path traversal vulnerability in Enlightenment's setuid binary (enlightenment_sys) to escalate privileges by manipulating pathnames starting with /dev/.., ultimately spawning a root shell.
This repository contains a functional exploit for CVE-2022-37706, a local privilege escalation vulnerability in Enlightenment's SUID binary `enlightenment_sys`. The exploit leverages a command injection flaw in the mount functionality to execute arbitrary commands as root.
This repository contains a functional exploit for CVE-2022-37706, a local privilege escalation vulnerability in Enlightenment's `enlightenment_sys` SUID binary. The exploit leverages a path traversal flaw to execute arbitrary commands with root privileges.
This repository contains a functional exploit for CVE-2022-37706, a local privilege escalation vulnerability in Enlightenment v0.25.3. The exploit abuses improper pathname handling in the `enlightenment_sys` SUID binary to execute arbitrary commands as root.
The repository contains a functional exploit for CVE-2022-37706, a local privilege escalation vulnerability in the Enlightenment window manager's `enlightenment_sys` binary. The exploit manipulates file paths and leverages the SUID bit to execute arbitrary code as root.
The repository contains a functional exploit for CVE-2022-37706, a local privilege escalation vulnerability in Enlightenment's SUID binary `enlightenment_sys`. The exploit leverages a command injection flaw by manipulating file paths and environment variables to execute arbitrary commands as root.
The repository contains a functional exploit for CVE-2022-37706, targeting a privilege escalation vulnerability in Enlightenment v0.25.3 via a SUID binary. The exploit leverages improper path handling in the `enlightenment_sys` binary to execute arbitrary commands with root privileges.
This repository contains a functional exploit for CVE-2022-37706, targeting a local privilege escalation (LPE) vulnerability in the Enlightenment window manager's SUID binary. The exploit leverages improper path handling to execute arbitrary commands with root privileges.
This Metasploit module exploits a command injection vulnerability in Enlightenment's enlightenment_sys binary (CVE-2022-37706) by injecting a semi-colon to execute arbitrary commands, achieving local privilege escalation on Ubuntu 22.04.1 with enlightenment 0.25.3-1.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H