Holey Beep: Linux 提权漏洞分析与利用(CVE-2018-0492)

Introduction Back in the old days, people were using the \a character to emit a horrible 'beep' sound from their speaker. It was a bit annoying, especially if you wanted more complicated stuff to do 8bits-like musics. That's why Johnathan Nightingale made the beep software. A very simple and shor...

tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...

GNU Beep 1.3 - HoleyBeep Local Privilege Escalation

GNU Beep 1.3 - HoleyBeep Local Privilege Escalation !/usr/bin/env python3 E-DB Note https://gist.github.com/Arignir/0b9d45c56551af39969368396e27abe8/ec853f14afd6e86fb3f2efce2086e28f33039ddc E-DB Note https://sigint.sh//holeybeep This is an exploit for HoleyBeep. To use it, place any command you...

GNU Beep 1.3 - 'HoleyBeep' Local Privilege Escalation

!/usr/bin/env python3 E-DB Note https://gist.github.com/Arignir/0b9d45c56551af39969368396e27abe8/ec853f14afd6e86fb3f2efce2086e28f33039ddc E-DB Note https://sigint.sh//holeybeep This is an exploit for HoleyBeep. To use it, place any command you want root to execute in /tmp/x. $ cat /tmp/x echo PWN...

Debian DLA-1338-1 : beep security update

It was discovered that there was a local privilege escalation vulnerability in beep, an 'advanced PC speaker beeper'. For Debian 7 'Wheezy', this issue has been fixed in beep version 1.3-3+deb7u1. We recommend that you upgrade your beep packages. NOTE: Tenable Network Security has extracted the...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

UBUNTU-CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

DEBIAN-CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Beep is affected by CVE-2018-0492: a race condition in the setuid-beep path allows local privilege escalation in the beep package (version around 1.3.4). Public disclosures reference Gentoo GLSA-201805-15 and Debian/DLA-1338-1; Fedora also released an update (beep-1.3-26.fc28). Mitigation in the ...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

[SECURITY] [DLA 1338-1] beep security update

Package : beep Version : 1.3-3+deb7u1 CVE ID : CVE-2018-0492 Debian Bug : 894667 It was discovered that there was a local privilege escalation vulnerability in beep, an "advanced PC speaker beeper". For Debian 7 "Wheezy", this issue has been fixed in beep version 1.3-3+deb7u1. We recommend that y...

Johnathan Nightingale beep local elevation of privilege vulnerability

Johnathan Nightingale beep is an application for making sounds such as alarms. A local elevation of privilege vulnerability exists in Johnathan Nightingale beep version 1.3.4 and earlier. A local attacker can exploit this vulnerability to elevate privileges...

Debian DSA-4163-1 : beep - security update

It was discovered that a race condition in beep if configured as setuid via debconf allows local privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4163. The text itself is copyright C...

[SECURITY] [DSA 4163-1] beep security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4163-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 02, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DLA-1338-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4163-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2017-13010

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...