EDB-43775

functional

glibc < 2.26 - 'getcwd()' Local Privilege Escalation

view exploit source exploit_dbverifiedtype localauthor halfdogpublished 2018-01-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-1000001UShigh7.8Exploit
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and poten…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan