EIP-2026-102798

PRE-CVE

cdrdao (Mandrake 10.2) - Local Privilege Escalation

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102798. PoCs published by newbug.

AI-analyzed exploit summary This exploit leverages a vulnerability in cdrdao to achieve local privilege escalation by manipulating the LD_PRELOAD environment variable via a symlink attack. It compiles a shared library to override getuid() and a setuid shell program to gain root access.

Description

cdrdao (Mandrake 10.2) - Local Privilege Escalation

Exploits (1)

exploitdb WORKING POC VERIFIED

by newbug · bashlocallinux

https://www.exploit-db.com/exploits/997

View Code ZIP pw:eip

This exploit leverages a vulnerability in cdrdao to achieve local privilege escalation by manipulating the LD_PRELOAD environment variable via a symlink attack. It compiles a shared library to override getuid() and a setuid shell program to gain root access.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: cdrdao (unspecified version)

No auth needed

Prerequisites: cdrdao must be setuid root · /etc/ld.so.preload must not exist · gcc must be available

MITRE ATT&CK

T1574 - Hijack Execution Flow T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026