Sploitus

CVE-2016-10010

3 known exploits for CVE-2016-10010

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.

Affected products
Alt Linux, Freebsd, Openssh, Suse, Ubuntu
Openbsd Openssh
≤ 7.3
CVSS 3.0
7.0 HIGH
EPSS
4.2% (90th percentile)
Weakness
CWE-264, CWE-269
NVD status
Modified
Published
2017-01-05
CVE-2016-10010 at NVD
Authoritative description, scoring and affected products

3 known exploits for CVE-2016-10010

Proof-of-concept code and exploit modules indexed by Sploitus

OpenSSH < 7.4 - 'UsePrivilegeSeparation Disabled' Forwarded Unix Domain Sockets Privilege Escalation
2016-12-23 Google Security ResearchEXPLOITDB
OpenSSH 7.4 - UsePrivilegeSeparation Disabled Forwarded Unix Domain Sockets Privilege Escalation Exp
2016-12-23 Google Security ResearchZDT
OpenSSH privilege escalation Vulnerability, CVE-2016-10010）
2016-12-21 RootSEEBUG