Description
suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- F-Secure Internet GateKeeper for Linux < 2.15.484 / Gateway < 2.16 - Local Privilege Escalation EDB-1297 · local · Nov 7, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1015160 vdb-entry
- 20546 vdb-entry
- 20543 vdb-entry
- 20538 vdb-entry
- 20540 vdb-entry
- 20549 vdb-entry
- 17467 third-party-advisory
- http://www.f-secure.com/security/fsc-2005-3.shtml
- 20544 vdb-entry
- 20547 vdb-entry
- ADV-2005-2331 vdb-entry
- 20550 vdb-entry
- 20541 vdb-entry
- 20551 vdb-entry
- 20537 vdb-entry
- 1015159 vdb-entry
- 20545 vdb-entry
- 20513 vdb-entry
- 20552 vdb-entry
- fsecure-scripts-root-privileges(22966) vdb-entry
- 20539 vdb-entry
- 20548 vdb-entry
- 15339 vdb-entry
- 20542 vdb-entry