CVE-2011-2921
CRITICALCVSS 9.8/10EPSS 82.83%
Last modified
CVE-2011-2921 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.. EPSS estimates a 82.83% chance of exploitation in the next 30 days.
Description
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ktsuss Project | Ktsuss | <= 1.4 |
References
- http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
- https://access.redhat.com/security/cve/cve-2011-2921Broken Link, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-2921Third Party Advisory
- http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
- https://access.redhat.com/security/cve/cve-2011-2921Broken Link, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-2921Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-2921?
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
How severe is CVE-2011-2921?
CVE-2011-2921 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 82.83% probability of exploitation in the next 30 days.
How do I fix CVE-2011-2921?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-2915Off-by-one error in the CSoundFile::ReadAMS2 function in src…
- CVE-2011-2916qtnx 0.9 stores non-custom SSH keys in a world-readable conf…5.5
- CVE-2011-2917SQL injection vulnerability in administrator/index2.php in M…
- CVE-2011-2918The Performance Events subsystem in the Linux kernel before …5.5
- CVE-2011-2919Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, a…
- CVE-2011-2920A flaw was found in Spacewalk and Red Hat Network Satellite.…5.5
- CVE-2011-2922ktsuss versions 1.4 and prior spawns the GTK interface to ru…7.8
- CVE-2011-2923foomatic-rip filter, all versions, used insecurely creates t…5.5
- CVE-2011-2924foomatic-rip filter v4.0.12 and prior used insecurely create…5.5
- CVE-2011-2925Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (M…
- CVE-2011-2926Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2011-2927A flaw was found in Spacewalk and Red Hat Network Satellite.…5.4
Are you affected by CVE-2011-2921?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST