EDB-40937
PoCApport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution
Exploit ansehen Quelle exploit_dbTyp localAutor Donncha OCearbhaillveröffentlicht 2016-12-14Katalog exploit_db
01
ausgenutzte CVEs (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-9951US | medium6.5 | Exploit | ||
An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be execu… | ||||
| CVE-2016-9950US | high7.8 | Exploit | ||
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a pat… | ||||
| CVE-2016-9949US | high7.8 | Exploit | ||
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan