perf-exploiter

perf-exploiter CVE-2014-2630 In einem unserer letzten Penetrationstests haben wir eine Schwachstelle missbraucht, die ein suid-Binary namens "xglance-bin" betrifft. Es ist Teil der HP Performance Monitoring Lösung und ermöglichte es uns, unsere lokalen unprivilegierten Sitzungen auf einigen Linux...

HP Performance Monitoring xglance Privilege Escalation Exploit

This Metasploit module is an exploit that takes advantage of xglance-bin, part of HP's Glance or Performance Monitoring version 11 and subsequent, which was compiled with an insecure RPATH option. The RPATH includes a relative path to -L/lib64/ which can be controlled by a user. Creating librarie...

HP Performance Monitoring xglance Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Performance Monitoring xglance Priv Esc', 'Description' = %q This exploit takes advantage of xglance-bin, part of HP's Glance or Performance...

HP Performance Monitoring xglance Priv Esc

This exploit takes advantage of xglance-bin, part of HP's Glance or Performance Monitoring version 11 'and subsequent' , which was compiled with an insecure RPATH option. The RPATH includes a relative path to -L/lib64/ which can be controlled by a user. Creating libraries in this location will...