ktsuss Local Security Bypass and Arbitrary Code Execution Vulnerabilities
BID:49151
CVE-2011-2922 |Info
ktsuss Local Security Bypass and Arbitrary Code Execution Vulnerabilities
| Bugtraq ID: | 49151 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-2921 CVE-2011-2922 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 16 2011 12:00AM |
| Updated: | Jan 30 2012 08:40PM |
| Credit: | Yves-Alexis Perez |
| Vulnerable: |
ktsuss ktsuss 1.4 ktsuss ktsuss 1.3 Gentoo Linux |
| Not Vulnerable: | |
Discussion
ktsuss Local Security Bypass and Arbitrary Code Execution Vulnerabilities
ktsuss is prone to a local security-bypass vulnerability and an arbitrary-code-execution vulnerability.
Attackers could exploit these issues to execute arbitrary code with root privileges, or bypass certain restrictions and perform unauthorized actions.
ktsuss 1.3 and 1.4 are vulnerable; other versions may also be affected.
ktsuss is prone to a local security-bypass vulnerability and an arbitrary-code-execution vulnerability.
Attackers could exploit these issues to execute arbitrary code with root privileges, or bypass certain restrictions and perform unauthorized actions.
ktsuss 1.3 and 1.4 are vulnerable; other versions may also be affected.
Exploit / POC
ktsuss Local Security Bypass and Arbitrary Code Execution Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
ktsuss Local Security Bypass and Arbitrary Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
ktsuss Local Security Bypass and Arbitrary Code Execution Vulnerabilities
References:
References: