tachote/cve-2021-4034Exploit for CVE-2021-4034, a Polkit pkexec privilege escalation vulnerability, allowing unprivileged users to gain root on Linux systems.
https://raw.githubusercontent.com/hackingyseguridad/CVE-2021-4034/main/binario
Copy the RAW content and paste it into the Bash shell console:
CVE-2021-4034 vulnerability, severity 7.8, dated 18/11/2021, in the pkexec component of Polkit https://gitlab.freedesktop.org/polkit/polkit/ Vulnerable polkit versions: 0.92, 0.93, 0.94, 0.95, 0.96, 0.97, 0.98, 0.99, 0.100, 0.101, 0.102, 0.103, 0.104, 0.105, 0.106, 0.107, 0.108, 0.109, 0.110, 0.111, 0.112, 0.113, 0.114, 0.115, 0.116, 0.117, 0.118, 0.119, 0.120 Error in the system service "/usr/bin/pkexec" in all versions since May 2009, on Linux OS it allows privilege escalation to root https://linux.die.net/man/1/pkexec
exploit released, published on the internet! https://github.com/hackingyseguridad/CVE-2021-4034/
Scope: All machines with Linux OS, since 2009
Impact: Any unprivileged user running from the Bash shell console becomes root! The vulnerability puts the confidentiality and integrity of data at risk, as well as the availability of the system.
