what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation

Posted Apr 19, 2019

Authored by Tavis Ormandy, Brendan Coles | Site metasploit.com

This Metasploit module attempts to gain root privileges by exploiting a vulnerability in the staprun executable included with SystemTap version 1.3. The staprun executable does not clear environment variables prior to executing modprobe, allowing an arbitrary configuration file to be specified in the MODPROBE_OPTIONS environment variable, resulting in arbitrary command execution with root privileges. This module has been tested successfully on: systemtap 1.2-1.fc13-i686 on Fedora 13 (i686); and systemtap 1.1-3.el5 on RHEL 5.5 (x64).

tags | exploit, arbitrary, root

systems | linux, fedora

advisories | CVE-2010-4170

SHA-256 | 57d955347310170d1a380dba46ef41462b10f297e733fec17201a3831094af3b

Download | Favorite | View

Related Files

No related files