EUVD-2011-2895

Malware in sbrugna...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

Code injection

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

CVE-2011-2922 affects ktsuss versions 1.4 and earlier, where the GTK interface is spawned with root privileges. This local vulnerability can allow an attacker to escalate to root and potentially abuse the GTK_MODULES environment variable to execute arbitrary code. Connected sources confirm the ro...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

Command injection

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2921

CVE-2011-2921 affects ktsuss versions 1.4 and earlier. The binary is setuid root and does not drop privileges before executing user-specified commands, allowing command execution with root privileges. Public references describe local privilege-escalation risk (no remote vectors stated here); rela...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

ktsuss 1.4 - suid Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ktsuss suid Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a vulnerability in ktsuss versio...

ktsuss Suid Privilege Escalation Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ktsuss suid Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a vulnerability in ktsuss versio...

ktsuss suid Privilege Escalation

This module attempts to gain root privileges by exploiting a vulnerability in ktsuss versions 1.4 and prior. The ktsuss executable is setuid root and does not drop privileges prior to executing user specified commands, resulting in command execution with root privileges. This module has been test...

Gentoo Security Advisory GLSA 201201-15 (ktsuss)

The remote host is missing updates announced in advisory GLSA 201201-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-15 (ktsuss)

The remote host is missing updates announced in advisory GLSA 201201-15. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

GLSA-201201-15 : ktsuss: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-15 ktsuss: Privilege escalation Two vulnerabilities have been found in ktuss: Under specific circumstances, ktsuss skips authentication and fails to change the effective UID back to the real UID CVE-2011-2921. The GTK...

ktsuss: Privilege escalation

Background ktsuss is a simple, graphical version of su written in C and GTK+. Description Two vulnerabilities have been found in ktuss: Under specific circumstances, ktsuss skips authentication and fails to change the effective UID back to the real UID CVE-2011-2921. The GTK interface spawned by...