Irked

nc should work for the CVE, keep trying different times and more importantly different payloads.

also my hint for root, when you find it you wont expect it, or atleast i didnt, lucky guess for me after reading what was going on with the system.