CVE-2011-2921

CVE-2011-2921: vulnerability in ktsuss

Published · Updated

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 83%
from disclosure to weapon0 days
Published on NVDNov 19
1st PoCSep 3
metasploitAug 13
exploitation probability
83%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Affected products
ktsuss · ktsuss
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47344cve_referencepacketstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.htmlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — ktsuss

In the same product, most dangerous first.

CVE-2011-2922—CVE-2011-2922EPSS 0.7%
References
http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.htmlhttps://access.redhat.com/security/cve/cve-2011-2921https://security-tracker.debian.org/tracker/CVE-2011-2921