CVE-2022-37706

CVE-2022-37706 Die CVE-2022-37706 -Schwachstelle betrifft den Enlightenment -Fenstermanager, genauer gesagt die Binärdatei enlightenmentsys. Diese Binärdatei hat das SUID -Bit Set User ID gesetzt, was bedeutet, dass sie mit erhöhten Rechten normalerweise als Root-Benutzer ausgeführt werden kann...

CVE-2022-37706

CVE-2022-37706 Olá pessoal, desta vez vou falar sobre uma 0-day recente que encontrei em um dos principais gerenciadores de janelas do Linux chamado Enlightenment https://www.enlightenment.org/. Essa 0-day vai levar qualquer usuário a privilégios de root de forma muito fácil e instantânea. O...

CVE-2022-37706

CVE-2022-37706 Exploit: escalation dei privilegi in Enlightenment v0.25.3 Descrizione Questa repository contiene un exploit per CVE-2022-37706 , una vulnerabilità di escalation locale dei privilegi in Enlightenment v0.25.3 e versioni precedenti. La vulnerabilità è dovuta alla gestione impropria d...

CVE-2022-37706-LPE-exploit

CVE-2022-37706 皆さん、今回は私が発見した最近の0-dayについてお話しします。Linuxの主要なウィンドウマネージャの一つであるEnlightenment https://www.enlightenment.org/ に関するものです。 この0-dayは、任意のユーザーを非常に簡単かつ即座にroot権限に昇格させます。 このエクスプロイトはUbuntu 22.04でテストされていますが、どのディストリビューションでも問題なく動作するはずです。...

CVE-2022-37706

CVE-2022-37706 Panoramica CVE-2022-37706 è una vulnerabilità Local Privilege Escalation LPE trovata nel componente enlightenmentsys dell'ambiente desktop Enlightenment per Linux. Questa vulnerabilità consente a un utente locale con privilegi bassi di elevare i propri privilegi a root sui sistemi...

Linux Distros Unpatched Vulnerability : CVE-2022-37706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - enlightenmentsys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles...

CVE-2022-37706

enlightenmentsys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring...

CVE-2022-37706

enlightenmentsys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring...

Ubuntu 22.04.1 X64 Desktop Enlightenment 0.25.3-1 Privilege Escalation Exploit

This Metasploit module exploits a command injection within Enlightenment's enlightenmentsys binary. This is done by calling the mount command and feeding it paths which meet all of the system requirements, but execute a specific path as well due to a semi-colon being used. This module was tested ...