Solaris - 'EXTREMEPARR' dtappgather Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Solaris 'EXTREMEPARR' dtappgather Privilege Escalation", 'Description' = %q This module exploits a directory traversal vulnerability in the...

Solaris EXTREMEPARR dtappgather Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Solaris 'EXTREMEPARR' dtappgather Privilege Escalation", 'Description' = %q This module exploits a directory traversal vulnerability in the...

CVE-2017-3622

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment CDE. The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to...

CVE-2017-3622

CVE-2017-3622 originally describes a local privilege-escalation in Solaris CDE (EXTREMEPARR) affecting Solaris 10; the related exploitability details show a directory-traversal in dtappgather that allows a local user to create a user-owned directory and, via loading a shared object, gain root pri...

CVE-2017-3622

creationtimestamp| type| source ---|---|--- 2017-04-24 18:09:03+00:00| published-proof-of-concept| https://t.me/webamoozir/1649 2018-09-23 18:02:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/extremeparrdtappgatherprivesc.rb 2018-09-25...