Vulnerability Details CVE-2011-2921
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.73
EPSS Ranking 98.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html
- https://access.redhat.com/security/cve/cve-2011-2921
- https://security-tracker.debian.org/tracker/CVE-2011-2921
- http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html
- https://access.redhat.com/security/cve/cve-2011-2921
- https://security-tracker.debian.org/tracker/CVE-2011-2921
Products affected by CVE-2011-2921
-
cpe:2.3:a:ktsuss_project:ktsuss:1.3
-
cpe:2.3:a:ktsuss_project:ktsuss:1.4