Product
medium
advisory
Potential Privilege Escalation via SUID/SGID Proxy Execution on Linux
1 rule 4 TTPsAttackers may exploit SUID/SGID binaries like pkexec, su, or sudo on Linux systems to execute commands with elevated privileges, by identifying instances where a process runs with root privileges (user ID 0 or group ID 0) while the real user or group ID is non-root, allowing a low-privilege foothold to gain full system control.
su +17
privilege-escalation
linux-security
defense-evasion
persistence
system-exploitation
1r
4t
high
advisory
Sudo Privilege Escalation Vulnerabilities
2 rules 1 TTP 2 CVEsMultiple vulnerabilities in sudo allow a local attacker to bypass security precautions and escalate privileges to root.
sudo
privilege-escalation
linux
2r
1t
2c