avatar
Pi-Hole Remove Commands Linux Privilege Escalation Exploit

Anon666Exp3rt 0.9K 2nd Sep, 2021

Plaintext 6.01 KB
copiar compartilhar raw download clone embed reportar print 
Carregando, por favor espere...
Descrição

CVECVE-2021-29449 | remote exploits | multiple | Pi-Hole versions 3.0 through 5.3 allows for command line input to the removecustomcname, removecustomdns, and removestaticdhcp functions without properly validating the parameters before passing to sed. When executed as the www-data user, this allows for a privilege escalation to root since www-data is in the sudoers.d/pihole file with no password.

Para compartilhar este texto, copie esta URL e envie para os seus amigos
Dados do Texto RAW
Textos Recentes