configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In addition, the SUID bit must be added to this file.
oryginał ENCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HFogproject
APPFogproject< 1.5.10.41
Powiązane podatności
FOG Project – pomijanie uwierzytelnienia umożliwia zrzut bazy danych
FOG Server — wyciek danych uwierzytelniających Active Directory przy rejestracji komputera
Command injection w FOGProject przez parametr filename w export.php
FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload featur...
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has miss...