CVE-2021-3560 PoC — polkit 代码问题漏洞

Source

https://github.com/BizarreLove/CVE-2021-3560

Associated Vulnerability

Title:polkit 代码问题漏洞 (CVE-2021-3560)
Description:It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Description

NYCY_homework_&_meeting

Readme

# A NYCU CVE-2021-3560 research. QQ
A CVE-2021-3560 poc, easy to read and learn.

reference from [POC](https://github.com/hakivvi/CVE-2021-3560) by hakivvi.
Thanks to hakivvi. He saved a lot of my time.



# run:
1. compile the exploit:

```
$ gcc -g cve-2021-3560_poc.c -o cve-2021-3560 /usr/lib/x86_64-linux-gnu/libdbus-1.so /usr/lib/x86_64-linux-gnu/libz.so
```

2. Simply Checking whether this machine is vulnerable.(for ubuntu)

```
$ ./cve-2021-3560 check
```

3. run the exploit:

```
$ ./cve-2021-3560
```

File Snapshot


 [4.0K]  /data/pocs/e39f015dc517dcc4d257eee8b46800a24e85ee00
├── [8.9K]  cve-2021-3560_poc.c
└── [ 515]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!