PT-2025-31681 · Kloxo · Kloxo

Published 2025-08-01 · Updated 2025-08-01 · CVE-2012-10022

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Kloxo versions 6.1.12 and earlier

Description Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48. The lxsuexec binary performs a uid check and permits execution of arbitrary commands as root if the invoking user matches uid 48. This flaw enables attackers with Apache-level access to escalate privileges to root without authentication.

Recommendations Kloxo versions prior to 6.1.12 should be updated.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2012-10022

Affected Products

Kloxo

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2012-10022 · Security Note
• https://github.com/KloxoNGCommunity/kloxo · Note
• https://t.me/cveNotify/130623 · Telegram Post
• https://kloxo.org · Note
• https://web.archive.org/web/20121122063935/http://roothackers.net/showthread.php?tid=92 · Note
• https://vulncheck.com/advisories/kloxo-local-priv-esc · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/local/kloxo_lxsuexec.rb · Note
• https://exploit-db.com/exploits/25406 · Note
• https://t.me/CVEtracker/28968 · Telegram Post