Which products and versions are affected by CVE-2011-2921?

Affected: Ktsuss (Ktsuss Project) versions >= 1.4 and prior. The full list is in the CVE brief.

Is CVE-2011-2921 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2011-2921 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2011-2921?

Public exploit code is available.

Is there a fix for CVE-2011-2921?

Fixed versions are available, including Ktsuss <=1.4, Ktsuss 1.4.

How urgently should CVE-2011-2921 be patched?

Brandefense priority: patch immediately, because it is very likely to be exploited soon.

Request A Demo

Vulnerability Intelligence

CVE-2011-2921

Q: What is CVE-2011-2921?

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

Q: How urgently should CVE-2011-2921 be patched?

Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CriticalPublic exploit

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

Published Nov 19, 2019 · Updated Nov 20, 2024

Key Facts

Patch immediately

CVE-2011-2921 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Ktsuss (Ktsuss Project).
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 83% probability of exploitation in the next 30 days.
Fixed versions are available, including Ktsuss <=1.4, Ktsuss 1.4.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v3.1

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS (30-day exploit likelihood)

83%

Higher than 99.6% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2011-2921 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

Affected Products

2 affected entries in total

Product	Affected versions	Fixed in
KtsussKtsuss Project	>= 1.4 and prior	1.4

Patched Releases

Ktsuss

<=1.4

Timeline

Publicly disclosed
Nov 19, 2019
Last updated
Nov 20, 2024

Weakness Type

CWE-273 Improper Check for Dropped Privileges

References

advisoryhttps://access.redhat.com/security/cve/cve-2011-2921
advisoryhttps://security-tracker.debian.org/tracker/CVE-2011-2921
exploithttp://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html
exploitMSF ktsuss_suid_priv_esc.rb
exploitExploitDB-47344

FAQ

Common Questions.

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Affected: Ktsuss (Ktsuss Project) versions >= 1.4 and prior. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Ktsuss <=1.4, Ktsuss 1.4.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.

Is CVE-2011-2921 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo