Merge pull request #264 from deoxykev/master

More robust implementation of pkexec binary modification time check
peass-ng · Feb 3, 2022 · 9f4045c · 9f4045c
2 parents db89a77 + 52c2a1e
commit 9f4045c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/linPEAS/builder/linpeas_parts/1_system_information.sh b/linPEAS/builder/linpeas_parts/1_system_information.sh
@@ -21,9 +21,9 @@ else echo_not_found "sudo"
 fi
 echo ""
 
-#-- SY) CVE-2021-4024
-if [ `command -v pkexec` ] && stat -c '%a' $(which pkexec) | grep -q 4755 && (stat -c '%y' $(which pkexec) | grep -qvE "2[0-9][2-9][3-9]-|2022-[0-1][2-9]-0[0-9]|2022-01-[2-3][0-9]|2022-01-1[2-9]" ) ; then 
-    echo "Vulnerable to CVE-2021-4024 (polkit privesc)" | sed -${E} "s,.*,${SED_RED_YELLOW},"
+#-- SY) CVE-2021-4034
+if [ `command -v pkexec` ] && stat -c '%a' $(which pkexec) | grep -q 4755 && [ "$(stat -c '%Y' $(which pkexec))" -lt "1642035600" ]; then 
+    echo "Vulnerable to CVE-2021-4034 (polkit privesc)" | sed -${E} "s,.*,${SED_RED_YELLOW},"
 fi
 
 #--SY) USBCreator