cve-2022-33891

CVE-2022-33891 Apache Spark 셸 명령 삽입 취약점 Apache Spark 셸 명령 삽입 취약점을 악용하기 위한 Python POC입니다. 다른 POC도 있지만 매우 의심스러워 보였습니다. 이 POC는 깔끔하고 간단합니다. 저는 이 익스플로잇/취약점을 발견하지 않았습니다. 단지 커뮤니티를 위한 안전한 POC를 만들고 싶었습니다 ^.^ 영향을 받는 버전 Apache Spark 버전 3.0.3 이하, 버전 3.1.13.1.2, 버전 3.2.0 3.2.1 취약한 구성 요소...

cve-2022-33891

CVE-2022-33891 Apache Spark シェルコマンドインジェクションの脆弱性 Apache Spark シェルコマンドインジェクション脆弱性を悪用するための Python POC。他の POC もいくつか見かけましたが、それらは非常に怪しいものでした。これはクリーンでシンプルです。 私はこのエクスプロイト/脆弱性を発見したわけではありません。コミュニティのために安全な POC を作りたかっただけです ^.^ CVE は Databricks の Kostya Kortchinsky 氏によって発見されました。 更新 2022/9/7: あら、これ用の Metasploi...

CVE-2022-33891

CVE-2022-33891 PoC CVE-2022-33891에 대한 PoC로, 사용자 정의 페이로드를 설정할 수 있습니다. 기본적으로 취약하지 않습니다. spark.acls.enable이 TRUE여야 합니다. 사용 목적 이 스크립트는 취약점 패치 목적으로만 대상 호스트에서 페이로드를 실행할 권한이 있는 인원으로 제한됩니다. 이 스크립트를 실행하기 전에 권한이 있는지 확인하십시오. 사용법 git clone https://github.com/west-wind/CVE-2022-33891.git python...

CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-15900

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...

DEBIAN-CVE-2023-28339

OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later...

Authorization Bypass

doas is vulnerable to authorization bypass. The vulnerability exists as the PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command...

The vulnerability of the setusercontext() function in the doas utility allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the setusercontext function in the doas utility exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, confidentiality, and accessibility of the protected information...

Unspecified vulnerability in slicer69 doas

slicer69 doas is a utility program used on the OpenBSD platform to execute privileged commands for Root users. A security vulnerability exists in slicer69 doas versions prior to 6.2, which can be exploited by an attacker to execute commands with root privileges...

CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-15900

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...

CVE-2019-15900

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...

CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

Command injection

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...

Design/Logic Flaw

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-15901

The CVE concerns slicer69 doas prior to 6.2 on non-OpenBSD platforms (Linux, possibly NetBSD). A setusercontext(3) call intended to adjust UID, primary GID, and secondary GIDs was replaced with a single setuid(2) call. As a result, the group ID is not changed and secondary group IDs are not initi...

CVE-2019-15900

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...

CVE-2019-15900

Consolidated details across NVD/Red Hat/OSV/PRION/CVE records show CVE-2019-15900 affects slicer69 doas before 6.2 on platforms other than OpenBSD. Root cause: on platforms lacking strtonum(3), the code uses sscanf without checking errors and inspects an uninitialized errstr, which can lead to su...