{"vulnerability": "CVE-2011-2921", "sightings": [{"uuid": "dd39da88-c273-4964-bcee-6257b1d45d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2921", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47344", "content": "", "creation_timestamp": "2019-09-03T00:00:00.000000Z"}, {"uuid": "781a1e06-688a-41a1-a709-141ef7d8cb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2921", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "f1d734c1-ca76-4664-bbdc-8fb6e58ed8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2921", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:56.000000Z"}, {"uuid": "ea651eeb-dfe6-493b-bea5-e7bca67b5e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2921", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ktsuss_suid_priv_esc.rb", "content": "", "creation_timestamp": "2019-09-02T17:41:31.000000Z"}, {"uuid": "66f77455-f1d1-423f-9d1d-c98c83546b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2921", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/846", "content": "CVE-2019-10677 DASAN Zhone ZNID GPON 2426A EU Multiple XSS\u6f0f\u6d1e\nCVE-2019-1619&CVE-2019-1622 Cisco Data Center Network Manager \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-15081 Opencart 3.x XSS\u6f0f\u6d1e\nCVE-2019-15814 Sentrifugo 3.2 XSS\u6f0f\u6d1e\nCVE-2011-2921 ktsuss 1.4 suid \u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nCVE-2019-16197 Dolibarr ERP-CRM 10.0.1 XSS\u6f0f\u6d1e\nCVE-2019-16119 WordPress Plugin Photo Gallery 1.5.34 SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-16068 Enigma NMS 65.0.0 CSRF\u6f0f\u6d1e\nCVE-2019-16065 Enigma NMS 65.0.0 SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2015-5287 ABRT sosreport \u672c\u5730\u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nCVE-2019-16701 pfSense 2.3.4&2.4.4-p3 \u9060\u7a0b\u4ee3\u78bc\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-16679 Gila CMS \u672c\u5730\u6587\u4ef6\u5305\u542b\u6f0f\u6d1e\nCVE-2019-17080 mintinstall 7.9.9 \u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-12562 DotNetNuke XSS\u6f0f\u6d1e\nCVE-2015-5287 ABRT sosreport \u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nCVE-2019-5485 NPMJS gitlabhook 0.0.17 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-17132 vBulletin 5.5.4 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-17271 vBulletin 5.5.4 SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-17225 Subrion 4.2.1 XSS\u6f0f\u6d1e\nCVE-2019-15741 GitLab Omnibus 12.2.1 Logrotate \u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nGaruda Media SQL\u6ce8\u5165\u6f0f\u6d1e\nBelajarBro SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-13529 SMA Solar Technology AG Sunny WebBox 1.6 CSRF\u6f0f\u6d1e\nCVE-2019-6971 TP-Link TL-WR1043ND 2 \u8eab\u4efd\u9a57\u8b49\u7e5e\u904e\u6f0f\u6d1e", "creation_timestamp": "2021-09-21T04:41:50.000000Z"}, {"uuid": "edb447ba-110e-418f-a0f5-bd98240ac477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2921", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ktsuss_suid_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64, armle, aarch64, riscv64le, riscv32le, ppc, mipsle, mipsbe\", \"author\": [\"John Lightsey\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to gain root privileges by exploiting\\n          a vulnerability in ktsuss versions 1.4 and prior.\\n\\n          The ktsuss executable is setuid root and does not drop\\n          privileges prior to executing user specified commands,\\n          resulting in command execution with root privileges.\\n\\n          This module has been tested successfully on:\\n\\n          ktsuss 1.3 on SparkyLinux 6 (2019.08) (LXQT) (x64); and\\n          ktsuss 1.3 on SparkyLinux 5.8 (LXQT) (x64).\", \"disclosure_date\": \"2011-08-13\", \"fullname\": \"exploit/linux/local/ktsuss_suid_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"ktsuss suid Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/ktsuss_suid_priv_esc.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/local/ktsuss_suid_priv_esc\", \"references\": [\"CVE-2011-2921\", \"URL-https://www.openwall.com/lists/oss-security/2011/08/13/2\", \"URL-https://security.gentoo.org/glsa/201201-15\", \"URL-https://github.com/bcoles/local-exploits/blob/master/CVE-2011-2921/ktsuss-lpe.sh\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:09.180866Z"}]}