CVE-2023-1326-PoC

CVE-2023-1326-PoC apport-cli 2.26.0 における CVE-2023–1326 の概念実証（Proof of Concept） この脆弱性は、apport-cli 2.26.0 における権限昇格であり、CVE-2023–26604 と類似しています。この脆弱性は、sudoers で設定されている場合にのみ機能します。 権限昇格攻撃が apport-cli 2.26.0 およびそれ以前のバージョンで発見されました。これは CVE-2023-26604 と類似しています。システムが特別に構成され、非特権ユーザーが sudo apport-cli...

CVE-2023-1326-PoC

CVE-2023-1326-PoC 针对 apport-cli 2.26.0 中 CVE-2023–1326 的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞，与 CVE-2023–26604 类似，但仅在将 apport-cli 分配至 sudoers 中时有效： 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击，与 CVE-2023-26604 类似。如果系统被特殊配置为允许非特权用户运行 sudo apport-cli，且 less 被设置为分页器，同时终端大小可被设置：则本地攻击者可以提升权限。 PoC root@kitploi...

DEVVORTEX

DEVVORTEX HackTheBox: Devvortex — 机器渗透测试报告 一份全面的技术演练，详细描述了攻破 HackTheBox 上 Devvortex 机器的过程。此路径演示了 子域名模糊测试 、Joomla API 枚举 、用于初始访问的 模板修改 、用于横向移动的 数据库哈希提取与破解 ，以及利用 Apport-CLI CVE-2023-1326 提权至 root。 执行摘要 目标操作系统： Linux 难度： 简单 域名： devvortex.htb 子域名： dev.devvortex.htb 关键概念： 子域名枚举、Joomla CMS 利用、信息泄露、Bcry...

SUSE CVE-2023-1326

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Apport vulnerability (USN-6018-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6018-1 advisory. Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation vulnerability in apport-cli when viewing crash reports and unprivileged...

Ubuntu: Security Advisory (USN-6018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1326

Technical details for CVE-2023-1326 are not provided in the connected documents. Available sources reference the vulnerability and related CVEs (e.g., CVE-2023-26604) but do not expose affected products, versions, or fixes beyond the apport-cli context.

CVE-2023-1326 local privilege escalation in apport-cli

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

CVE-2023-1326 local privilege escalation in apport-cli

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...