EIP-2026-114765
PRE-CVEEmacs - movemail Privilege Escalation (Metasploit)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114765. PoCs published by Metasploit.
AI-analyzed exploit summary This Metasploit module exploits a SUID-root installation of the Emacs movemail utility to escalate privileges by writing to /usr/lib/crontab.local, a technique documented in historical contexts like The Cuckoo's Egg. It checks for 4.3BSD systems, verifies SUID permissions, and crafts a crontab entry to execute arbitrary commands as root.
Description
Emacs - movemail Privilege Escalation (Metasploit)
Exploits (1)
This Metasploit module exploits a SUID-root installation of the Emacs movemail utility to escalate privileges by writing to /usr/lib/crontab.local, a technique documented in historical contexts like The Cuckoo's Egg. It checks for 4.3BSD systems, verifies SUID permissions, and crafts a crontab entry to execute arbitrary commands as root.