cve/2022/CVE-2022-37705.md

CVE-2022-37705

Description

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the arguments passed to tar binary (it expects that the argument name and value are separated with a space; however, separating them with an equals sign is also supported),

POC

Reference

• https://github.com/MaherAzzouzi/CVE-2022-37705

Github

• https://github.com/MaherAzzouzi/CVE-2022-37705
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC