cve/2022/CVE-2022-37704.md

CVE-2022-37704

Description

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

POC

Reference

• https://github.com/MaherAzzouzi/CVE-2022-37704

Github

• https://github.com/MaherAzzouzi/CVE-2022-37704
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC