critical9.8Public exploit code
CVE-2011-2921
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ktsuss 1.4 - suid Privilege Escalation (Metasploit)2019-09-03 · local · linux · Verified
Impact
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ktsuss Project | Ktsuss | through 1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html
- https://access.redhat.com/security/cve/cve-2011-2921
- https://security-tracker.debian.org/tracker/CVE-2011-2921
- http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html
- https://access.redhat.com/security/cve/cve-2011-2921
- https://security-tracker.debian.org/tracker/CVE-2011-2921