cve/2017/CVE-2017-11741.md

CVE-2017-11741

Description

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.

POC

Reference

• http://seclists.org/fulldisclosure/2017/Aug/0
• https://www.exploit-db.com/exploits/43224/

Github

No PoCs found on GitHub currently.