PT-2019-6656 · Kt · Ktsuss

Published 2019-11-19 · Updated 2019-11-21 · CVE-2011-2921

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ktsuss versions 1.4 and prior

Description The issue allows for command execution with root privileges due to the uid being set to root and privileges not being dropped before executing user-specified commands.

Recommendations For versions 1.4 and prior, consider dropping privileges before executing user-specified commands to prevent command execution with root privileges. As a temporary workaround, restrict the use of ktsuss to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-273

Related Identifiers

CVE-2011-2921

Affected Products

Ktsuss

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ktsuss_suid_priv_esc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/47344 · Exploit
• 🔥 http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2921 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-2921 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2011-2921 · Note