CVE-2014-2630 PoC — HP Operations Agent 本地提权漏洞

Source

https://github.com/redtimmy/perf-exploiter

Associated Vulnerability

Title:HP Operations Agent 本地提权漏洞 (CVE-2014-2630)
Description:Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.

Description

CVE-2014-2630 exploit for xglance-bin

Readme

# perf-exploiter (CVE-2014-2630) 

In one of our recent penetration tests we have abused a vulnerability affecting a suid binary called "`xglance-bin`". Part of *HP Performance Monitoring solution*, it allowed us to escalate our local unprivileged sessions on some Linux RHEL 7.x/8.x systems to `root`. To be very honest, it was not the first time we leveraged that specific vulnerability as we abused it frequently on many HP servers with RHEL installed since 2014.

There has been indeed a CVE registered for the flaw ([CVE-2014-2630](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2630)) originally discovered by Tim Brown from Portcullis. However, up to today,there is no trace in the internet of a public exploit. Hence the idea to release our code. 

For more details please visit our [blog](https://www.redtimmy.com/).

File Snapshot


 [4.0K]  /data/pocs/ddc4e7c1943b2f8b620c0fa6b27018b291296306
├── [105K]  perf-exploiter.sh
└── [ 835]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!