CVE-2015-5699

Related Files

Cumulus Linux 2.5.3 Privilege Escalation

Posted Aug 18, 2015

Authored by Gregory Pickett | Site hellfiresecurity.com

Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, is vulnerable to local privilege escalation via command injection. Cumulus Linux's clcmd_server, when receiving commands that end in user supplied labels, will execute any other command appended to the end of it whether it is in the Rosetta or not. And it will do so using its own running credentials which are root. Versions 2.5.3 and earlier are affected.

tags | exploit, local, root

systems | linux

advisories | CVE-2015-5699

SHA-256 | a1fb04f6cf34bae2b04ccf1d59b164a1842267b7fa3db86f1b9bd93597c10072

Download | Favorite | View