CVE-2011-1485

/* * Exploit Title: pkexec Race condition (CVE-2011-1485) exploit * Author: xi4oyu * Tested on: rhel 6 * CVE : 2011-1485 * Linux pkexec exploit by xi4oyu , thx dm@0x557org * Have fun~ ¡Á U can reach us @ wwwwooyunorg :) */ #include <stdioh> #include <limitsh> #include <timeh> #include <unistdh> #include &lt ...

/* polkit-pwnagec * * * ============================== * = PolicyKit Pwnage = * = by zx2c4 = * = Sept 2, 2011 = * ============================== * * * Howdy folks, * * This exploits CVE-2011-1485, a race condition in PolicyKit * * davidz25 explains: * * --begin-- * Briefly, the problem ...

## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class Metasploit4 < Msf::Exploit::Local Rank = GreatRanking include Msf::Exploit::EXE include Msf::Post::File include Msf::Exploit::Local::Linux def initialize(info = {}) super(update_info(info ...

Linux pkexec and polkitd 096 race condition privilege escalation exploit ...

pkexec race condition privilege escalation exploit ...

A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec Those vulnerable include RHEL6 prior to polkit-096-2el6_01 and Ubuntu libpolkit-backend-1 prior t ...

PolicyKit versions 0101 and below local privilege escalation exploit ...