9 matches found
CVE-2023-1326-PoC
CVE-2023-1326-PoC apport-cli 2.26.0 における CVE-2023–1326 の概念実証(Proof of Concept) この脆弱性は、apport-cli 2.26.0 における権限昇格であり、CVE-2023–26604 と類似しています。この脆弱性は、sudoers で設定されている場合にのみ機能します。 権限昇格攻撃が apport-cli 2.26.0 およびそれ以前のバージョンで発見されました。これは CVE-2023-26604 と類似しています。システムが特別に構成され、非特権ユーザーが sudo apport-cli...
CVE-2023-1326-PoC
CVE-2023-1326-PoC 针对 apport-cli 2.26.0 中 CVE-2023–1326 的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞,与 CVE-2023–26604 类似,但仅在将 apport-cli 分配至 sudoers 中时有效: 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击,与 CVE-2023-26604 类似。如果系统被特殊配置为允许非特权用户运行 sudo apport-cli,且 less 被设置为分页器,同时终端大小可被设置:则本地攻击者可以提升权限。 PoC root@kitploi...
DEVVORTEX
DEVVORTEX HackTheBox: Devvortex — 机器渗透测试报告 一份全面的技术演练,详细描述了攻破 HackTheBox 上 Devvortex 机器的过程。此路径演示了 子域名模糊测试 、Joomla API 枚举 、用于初始访问的 模板修改 、用于横向移动的 数据库哈希提取与破解 ,以及利用 Apport-CLI CVE-2023-1326 提权至 root。 执行摘要 目标操作系统: Linux 难度: 简单 域名: devvortex.htb 子域名: dev.devvortex.htb 关键概念: 子域名枚举、Joomla CMS 利用、信息泄露、Bcry...
SUSE CVE-2023-1326
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Apport vulnerability (USN-6018-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6018-1 advisory. Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation vulnerability in apport-cli when viewing crash reports and unprivileged...
Ubuntu: Security Advisory (USN-6018-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-1326
Technical details for CVE-2023-1326 are not provided in the connected documents. Available sources reference the vulnerability and related CVEs (e.g., CVE-2023-26604) but do not expose affected products, versions, or fixes beyond the apport-cli context.
CVE-2023-1326 local privilege escalation in apport-cli
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...
CVE-2023-1326 local privilege escalation in apport-cli
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...