exploit/linux/local/glibc_realpath_priv_esc

functional

glibc 'realpath()' Privilege Escalation

view exploit source metasploittype exploitpublished 2018-01-16catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-1000001US	high7.8	13.4% (96th)	Exploit	2018-01-31
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and poten…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.