Main
Vulnerability Database
Exploits
ID:631 - Exploit for Privilege escalation in OpenSSH - CVE-2016-10010
ID:631 - Exploit for Privilege escalation in OpenSSH - CVE-2016-10010
Published: March 18, 2020
Vulnerability identifier: #VU2053
Vulnerability risk: Low
CVE-ID: CVE-2016-10010
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
OpenSSH
OpenSSH
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to execute arbitrary code on vulnerable system with root privileges.
The vulnerability exists due to an error in sshd in serverloop.c, which may allow a local authenticated user to execute arbitrary code with root privileges via a forwarded Unix-domain socket.
Successful exploitation of this vulnerability may allow a local user to elevate privileges.
The vulnerability exists due to an error in sshd in serverloop.c, which may allow a local authenticated user to execute arbitrary code with root privileges via a forwarded Unix-domain socket.
Successful exploitation of this vulnerability may allow a local user to elevate privileges.
Remediation
Install the latest version of OpenSSH 7.4.