admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 18:27:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-34477.md
0xMarcio 7909e50b64 Update CVE sources 2024-05-28 00:32
2024-05-28 00:32:59 +00:00

806 B
Raw Permalink Blame History

CVE-2024-34477

Description

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In addition, the SUID bit must be added to this file.

POC

Reference

No PoCs from references.

Github