Symlink Race Condition Privilege Escalation in ABRT

This repository contains a single Metasploit module (Ruby file) that exploits a local privilege escalation vulnerability (CVE-2015-3315) in the Automatic Bug Reporting Tool (ABRT) on certain Linux distributions (notably RHEL and Fedora). The exploit leverages a race condition in ABRT's crash handler, allowing a local attacker to change the ownership of arbitrary files via a symlink attack. The module targets /etc/passwd, making it writable, and appends a new root user entry. It then uploads and executes a payload (such as a Meterpreter or shell) as root. The module includes checks to ensure the target is vulnerable (ABRT version, service status, directory existence, etc.) and performs cleanup by restoring /etc/passwd ownership and removing the added user. The exploit is weaponized, as it is part of the Metasploit framework and supports customizable payloads. The main attack vector is local, requiring shell access to the target system.