CVE-2021-4034 Polkit Vulnerability Demonstration

Описание: A 12-year-old security vulnerability has been disclosed in a system utility called Polkit that grants attackers root privileges on Linux systems. pkexec, analogous to the sudo command, allows an authorised user to execute commands as another user, doubling as an alternative to sudo. This vulnerability affects anyone running major Linux distributions among the most popular one, Ubuntu. Any malicious actor who might of gained access to a system, a system which runs Linux, this vulnerability can get exploited to instantly grant root privileges. Watch this demo presented by Ervin which he will explain the vulnerability and exploit it.

#Polkit #vulnerability

For advice on how to defend your organisation against these types of attacks contact Nowcomm at:

[email protected]
0300 3031200
nowcomm.com

----
// SUBSCRIBE
Subscribe to Nowcomm's channel for the latest trends, news and tips for Collaboration, Networks and Cyber Security!

// FOLLOW
Twitter:   / nowcomm  
LinkedIn:   / nowcomm  
Facebook:   / nowcomm  

// LET'S TALK!
Email: [email protected]
Phone number: 0300 3031200
Website: nowcomm.com

// ABOUT NOWCOMM
We’re an elite team of technology experts in the design, delivery and customer service of Cisco solutions.
Our focus is high quality services and support, specialising in Enterprise Network Infrastructure, Collaboration and Security.
We are one of only a handful Cisco Partners in the UK to hold both Cisco Gold Partner and Master Collaboration status.