CVE-2018-12015

CVE-2018-12015

About

• https://nvd.nist.gov/vuln/detail/CVE-2018-12015

PoC / Exploit

• https://knqyf263.hatenablog.com/entry/2018/06/27/181037

Environment used

• Ubuntu 18.04.4 LTS
• Perl 5.26.2

Reproduction

• Server

  • Docker:

    docker run --rm -p 8022:22 -it simaofsilva/cve-2018-12015

  • Script:

    sudo bash installation.sh

• Client

  • Docker:

    ssh <Server IP> -l root -p 8022
    bash run.sh

  • Script:

    sudo bash run.sh

For better visualization first create the file /tmp/moo with content.
The exploit result will be the override of that file.