EDB-35234

functional

OSSEC 2.8 - 'hosts.deny' Local Privilege Escalation

view exploit source exploit_dbverifiedtype localauthor skynet-13published 2014-11-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-5284UShigh7.2Exploit
host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan