Openbsd-Privilege-Escalation

Openbsd-Privilege-Escalation OpenBSDシステム上で特権昇格のプロセスを自動化するスクリプトです。CVE-2019-19520 xlockバイナリを悪用してそのsgidを取得し、CVE-2019-19522 authグループの権限を悪用してSkeyまたはYubikeyに鍵を追加することで、rootユーザーに昇格します。 Cコードは、元のPoC（https://www.openwall.com/lists/oss-security/2019/12/04/5）をほぼコピーしたものです。 CVE-2019-19522:...

OpenBSD 6.6 Multiple Authentication Bypass Vulnerabilities

Binary data openbsdauthbypass.nbin...

CVE-2019-19522

creationtimestamp| type| source ---|---|--- 2019-12-05 11:44:38+00:00| published-proof-of-concept| https://t.me/antichat/7241 2019-12-05 12:42:53+00:00| published-proof-of-concept| https://t.me/thehackernews/550 2024-03-07 14:11:58+00:00| seen| https://t.me/ctinow/202414 2026-08-22 21:00:06+00:00...

OpenBSD Multiple Authentication Vulnerabilities

Multiple authentication vulnerabilities in OpenBSD have been disclosed by Qualys Research Labs. The vulnerabilities are assigned following CVEs: CVE-2019-19522, CVE-2019-19521, CVE-2019-19520, CVE-2019-19519. OpenBSD developers have confirmed the vulnerabilities and also provided a quick response...

Qualys Security Advisory - OpenBSD Authentication Bypass / Privilege Escalation

Qualys Security Advisory Authentication vulnerabilities in OpenBSD ============================================================================== Contents ============================================================================== 1. CVE-2019-19521: Authentication bypass 1.1. Analysis 1.2. Cas...

CVE-2019-19522

OpenBSD 6.6 is affected when S/Key or YubiKey authentication is enabled (non-default). A local attacker in the auth group can escalate to root because root’s file can be written to /etc/skey or /var/db/yubikey and need not be owned by root. This CVE corresponds to CVE-2019-19522. Reported impact ...