CVE-2019-14257

pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765...

When Checking the Box Results in Two Zero Days and Root (CVE-2019-14257 and CVE-2019-14258)

Finding new bugs and exploiting them can be exciting and fun for a penetration tester. I was ecstatic to find my first two zero-days, and I used them to break a system from no access to root. This was a good day for me - but the story behind the story provides some real lessons enterprises can...

CVE-2019-14257

Zenoss 2.5.3 is affected by CVE-2019-14257 via its pyraw component, enabling local privilege escalation by modifying environment variables to redirect execution before privileges are dropped (ZEN-31765). The vulnerability description in the connected records confirms the presence of a local escal...