Merge pull request #264 from deoxykev/master

More robust implementation of pkexec binary modification time check
fix typo
2025-12-21 14:50:36 -08:00 · 2022-02-03 09:53:50 +00:00 · 2022-02-02 21:32:43 -08:00 · 2022-02-02 21:30:43 -08:00
1 changed files with 3 additions and 3 deletions
--- a/linPEAS/builder/linpeas_parts/1_system_information.sh
+++ b/linPEAS/builder/linpeas_parts/1_system_information.sh
@@ -21,9 +21,9 @@ else echo_not_found "sudo"
 fi
 echo ""

-#-- SY) CVE-2021-4024
-if [ `command -v pkexec` ] && stat -c '%a' $(which pkexec) | grep -q 4755 && (stat -c '%y' $(which pkexec) | grep -qvE "2[0-9][2-9][3-9]-|2022-[0-1][2-9]-0[0-9]|2022-01-[2-3][0-9]|2022-01-1[2-9]" ) ; then 
-    echo "Vulnerable to CVE-2021-4024 (polkit privesc)" | sed -${E} "s,.*,${SED_RED_YELLOW},"
+#-- SY) CVE-2021-4034
+if [ `command -v pkexec` ] && stat -c '%a' $(which pkexec) | grep -q 4755 && [ "$(stat -c '%Y' $(which pkexec))" -lt "1642035600" ]; then 
+    echo "Vulnerable to CVE-2021-4034 (polkit privesc)" | sed -${E} "s,.*,${SED_RED_YELLOW},"
 fi

 #--SY) USBCreator