EDB-40937
PoCApport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution
view exploit source exploit_dbtype localauthor Donncha OCearbhaillpublished 2016-12-14catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-9951US | medium6.5 | Exploit | ||
An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be execu… | ||||
| CVE-2016-9950US | high7.8 | Exploit | ||
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a pat… | ||||
| CVE-2016-9949US | high7.8 | Exploit | ||
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan