EUVD-2011-2895

Malware in sbrugna...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

Code injection

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

CVE-2011-2922 affects ktsuss versions 1.4 and earlier, where the GTK interface is spawned with root privileges. This local vulnerability can allow an attacker to escalate to root and potentially abuse the GTK_MODULES environment variable to execute arbitrary code. Connected sources confirm the ro...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

Command injection

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2921

CVE-2011-2921 affects ktsuss versions 1.4 and earlier. The binary is setuid root and does not drop privileges before executing user-specified commands, allowing command execution with root privileges. Public references describe local privilege-escalation risk (no remote vectors stated here); rela...

PT-2019-6657

Name of the Vulnerable Software and Affected Versions ktsuss versions 1.4 and prior Description The issue allows a local attacker to escalate privileges to root. This can be achieved by spawning the GTK interface to run as root, potentially using the GTK MODULES environment variable to execute...

PT-2019-6656

Name of the Vulnerable Software and Affected Versions ktsuss versions 1.4 and prior Description The issue allows for command execution with root privileges due to the uid being set to root and privileges not being dropped before executing user-specified commands. Recommendations For versions 1.4...

CVE-2011-2922: Improper Input Validation

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2921: Improper Check for Dropped Privileges

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

ktsuss 1.4 - suid Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ktsuss suid Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a vulnerability in ktsuss versio...

ktsuss Suid Privilege Escalation Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ktsuss suid Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a vulnerability in ktsuss versio...

Gentoo Security Advisory GLSA 201201-15 (ktsuss)

The remote host is missing updates announced in advisory GLSA 201201-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...