Exploit for #VU60007 Input validation error in polkit

Vulnerability identifier: #VU60007

Vulnerability risk: Medium

CVSSv4.0: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2021-4034

CWE-ID: CWE-20

Exploitation vector: Local

Exploits in database: 73

• April 27, 2023
  • CVE-Exploits (CVE-Exploits) [Github]
• February 20, 2023
  • CVE-2021-4034 () [Github]
• February 15, 2023
  • CVE-2021-4034 (PoC CVE 2021-4034 PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec) [Github]
• December 7, 2022
  • CVE-2021-4034- (PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)) [Github]
• October 16, 2022
  • poppy (CVE-2021-4034 PoC , polkit < 0.131) [Github]
• October 10, 2022
  • AutoPwnkit (A tool to automate the exploit PWNKIT (CVE-2021-4034)) [Github]
• September 27, 2022
  • CVE-2021-4034 (Vulnerability to CVE-2021-4034 Pwnkit) [Github]
• September 3, 2022
  • CVE-2021-4034 (pwnkit auto exploiter written in Go, no network connectivity required.) [Github]
• August 16, 2022
  • CVE-2021-4034-exploit (I am not the real author of this exploits.. There are two exploits available, use any of one if it doesn't work use another one... Manual for this two exploit has given in README file. Please read that file before using it.. :) ) [Github]
• August 14, 2022
  • Kernel-Exploits (Kernel exploits consisting mostly of privilege escalation attacks against core components of Linux distribtions) [Github]
• July 4, 2022
  • cve-2021-4034 (port of CVE-2021-4034 exploit to Rust/cargo for my own edification) [Github]
  • pkexec-exploit (pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)) [Github]
• June 22, 2022
  • Pwnkit-go (A golang based exp for CVE-2021-4034 dubbed pwnkit (more features added......)) [Github]
• June 9, 2022
  • CVE-2021-4034 (Exploit modificado para el tito Eu) [Github]
• May 31, 2022
  • cve-2021-4034 (CVE-2021-4034 for single commcand) [Github]
• May 13, 2022
  • PolicyKit-1 0.105-31 - Privilege Escalation [Exploit-DB]
• May 12, 2022
  • Local Privilege Escalation in polkits pkexec [Metasploit]
• April 21, 2022
  • CVE-2021-4034 (PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec in Python) [Github]
• March 17, 2022
  • CVE-2021-4034 () [Github]
• March 15, 2022
  • PWNKITVulnerability (CVE-2021-4034 (PWNKIT).) [Github]
  • pwnkit-vulnerability (CVE-2021-4034 (PWNKIT).) [Github]
• March 2, 2022
  • ez-pwnkit (Go implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)) [Github]
• February 21, 2022
  • CVE-2021-4034 (PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec in Python) [Github]
• February 20, 2022
  • CVE-2021-4034 (pkexec EoP exploit) [Github]
• February 16, 2022
  • CVE-2021-4034 (A simple PWNKIT file to convert you to root ) [Github]
  • CVE-2021-4034 (CVE-2021-4034 centos8可用版本) [Github]
• February 13, 2022
  • CVE-2022-4034 (A simple PWNKIT file to convert you to root ) [Github]
  • pwncat_pwnkit (pwncat module that automatically exploits CVE-2021-4034 (pwnkit)) [Github]
  • lsm_bpf_check_argc0 (LSM BPF module to block pwnkit (CVE-2021-4034) like exploits) [Github]
• February 9, 2022
  • polkit_CVE-2021-4034 (Ansible role to patch RHSB-2022-001 Polkit Privilege Escalation - (CVE-2021-4034)) [Github]
  • CVE-2021-4034-NoGCC (CVE-2021-4034简单优化，以应对没有安装gcc和make的目标环境) [Github]
  • CVE-2021-4034 (Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation) [Github]
• February 8, 2022
  • pwnkit (PoC for CVE-2021-4034.) [Github]
  • CVE-2021-4034 (Pwnkit Exploit (CVE-2021-4034), no download capabilty? Copy and paste it!) [Github]
  • polkit-0.96-CVE-2021-4034 (centos 6.10 rpm for fix polkit CVE-2021-4034; centos 6.10的rpm包，修复CVE-2021-4034 漏洞) [Github]
• February 6, 2022
  • CVE-2021-4034 (An exploit for CVE-2021-4034 aka Pwnkit: Local Privilege Escalation in polkit's pkexec) [Github]
  • CVE-2021-4034 (pkexec (Polkit) exploit of Privilege Escalation vulnerability CVE-2021-4034) [Github]
• February 4, 2022
  • PwnKit-Hunter (PwnKit-Hunter is here to help you check if your systems are vulnerable to CVE-2021-4043, a.k.a. PwnKit) [Github]
• February 1, 2022
  • PoC-CVE-2021-4034 (Pwnkit CVE-2021-4034) [Github]
• January 31, 2022
  • CVE-2021-4034 (Pre-compiled builds for CVE-2021-4034) [Github]
  • Polkit-pkexec-exploit-for-Linux (CVE-2021-4034) [Github]
• January 30, 2022
  • pwnkit-go (Exploit for the PwnKit vulnerability, CVE-2021-4034, written in Go) [Github]
  • cve-2021-4034 (PoC for cve-2021-4034) [Github]
  • CVE-2021-4034-PwnKit (PwnKit PoC for Polkit pkexec CVE-2021-4034 ) [Github]
  • CVE-2021-4034 (CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation) [Github]
  • POC-CVE-2021-4034 () [Github]
  • CVE-2021-4034 (CVE-2021-4034) [Github]
• January 27, 2022
  • CVE-2020-4034 (Polkit pkexec CVE-2021-4034 Proof Of Concept and Patching) [Github]
  • CVE-2021-4034 () [Github]
  • CVE-2021-4034-POC () [Github]
  • PwnKit-Exploit (Proof of Concept (PoC) CVE-2021-4034 ) [Github]
  • CVE-2021-4034 (PoC for CVE-2021-4034) [Github]
  • pwnkit (PoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120.) [Github]
  • -CVE-2021-4034 () [Github]
  • CVE-2021-4034 (Exploit for CVE-2021-4034) [Github]
  • pkwner (A python3 and bash PoC for CVE-2021-4034 by Kim Schulz) [Github]
  • CVE-2021-4034 () [Github]
  • CVE-2021-4034 (Pseudopatch for CVE-2021-4034) [Github]
  • CVE-2021-4034 (Linux system service bug gives root on all major distros, exploit published A vulnerability in the pkexec component of Polkit identified as CVE-2021-4034 PwnKit is present in the default configuration of all major Linux distributions and ca [Github]
  • CVE-2021-4034 (CVE-2021-4034: Local Privilege Escalation in polkit's pkexec proof of concept) [Github]
  • CVE-2021-4034 (CVE-2021-4034 POC and Docker and Analysis write up) [Github]
  • pwnkit-exploit (CVE-2021-4034 POC exploit) [Github]
  • pkexec-lpe-poc (POC for CVE-2021-4034) [Github]
  • cve-2021-4034 (PoC for cve-2021-4034) [Github]
  • CVE-2021-4034 (polkit pkexec Local Privilege Vulnerability to Add custom commands) [Github]
  • CVE-2021-4034 (CVE-2021-4034) [Github]
  • CVE-2021-4034 (Local Privilege Escalation in polkit's pkexec) [Github]
  • CVE-2021-4034 (Python exploit code for CVE-2021-4034 (pwnkit)) [Github]
  • poc-cve-2021-4034 (PoC for CVE-2021-4034 dubbed pwnkit) [Github]
  • PwnKit (Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation) [Github]
  • CVE-2021-4034 (A Golang implementation of clubby789's implementation of CVE-2021-4034) [Github]
  • CVE-2021-4034 (PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)) [Github]
  • CVE-2021-4034 (CVE-2021-4034 1day) [Github]

Vulnerable software:
polkit
Other software / Other software solutions

Vendor: Freedesktop.org