CVE-2011-2921

Name of the Vulnerable Software and Affected Versions ktsuss versions 1.4 and prior

Description The issue allows for command execution with root privileges due to the uid being set to root and privileges not being dropped before executing user-specified commands.

Recommendations For versions 1.4 and prior, consider dropping privileges before executing user-specified commands to prevent command execution with root privileges. As a temporary workaround, restrict the use of ktsuss to minimize the risk of exploitation.