Battery Life Toolkit 'bltk_sudo' Local Privilege Escalation Vulnerability
BID:37996
Info
Battery Life Toolkit 'bltk_sudo' Local Privilege Escalation Vulnerability
| Bugtraq ID: | 37996 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 28 2010 12:00AM |
| Updated: | Feb 19 2010 10:01AM |
| Credit: | Matthew Garrett |
| Vulnerable: |
Red Hat Fedora 12 Red Hat Fedora 11 LessWatts.org Battery Life Toolkit 1.0.9 |
| Not Vulnerable: | |
Discussion
Battery Life Toolkit 'bltk_sudo' Local Privilege Escalation Vulnerability
Battery Life Toolkit (BLTK) is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to execute arbitrary code with superuser privileges, resulting in the complete compromise of the affected computer.
This issue affects BLTK 1.0.9; other versions may be vulnerable as well.
Battery Life Toolkit (BLTK) is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to execute arbitrary code with superuser privileges, resulting in the complete compromise of the affected computer.
This issue affects BLTK 1.0.9; other versions may be vulnerable as well.
Exploit / POC
Battery Life Toolkit 'bltk_sudo' Local Privilege Escalation Vulnerability
An attacker can use system utilities to exploit this issue.
The following proof of concept is available:
/usr/lib/bltk/bin/bltk_sudo /bin/bash
An attacker can use system utilities to exploit this issue.
The following proof of concept is available:
/usr/lib/bltk/bin/bltk_sudo /bin/bash
Solution / Fix
Battery Life Toolkit 'bltk_sudo' Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Battery Life Toolkit 'bltk_sudo' Local Privilege Escalation Vulnerability
References:
References:
- Battery Life Toolkit (BLTK) (LessWatts.org)