infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Land #10745, Update lastore_daemon_dbus_priv_esc tested versions

GSoC/Meterpreter_Web_Console
Brent Cook 2018-10-05 11:35:31 -04:00
parent f6306254ce fe7ce02dfd
commit a51243ce91
No known key found for this signature in database
GPG Key ID: 1FFAA0B24B708F96
2 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
documentation/modules/exploit/linux/local/lastore_daemon_dbus_priv_esc.md
View File

@ -7,7 +7,7 @@
## Vulnerable Application
The `lastore-daemon` D-Bus configuration on Deepin Linux 15.5 permits any
The `lastore-daemon` D-Bus configuration on Deepin Linux permits any
user in the `sudo` group to install arbitrary system packages without
providing a password, resulting in code execution as root. By default,
the first user created on the system is a member of the `sudo` group.
@ -30,8 +30,10 @@
</policy>
```
This module has been tested successfully with lastore-daemon version
0.9.53-1 on Deepin Linux 15.5 (x64).
This module has been tested successfully with lastore-daemon versions:
* 0.9.53-1 on Deepin Linux 15.5 (x64)
* 0.9.66-1 on Deepin Linux 15.7 (x64)
Deepin Linux is available here:

7
modules/exploits/linux/local/lastore_daemon_dbus_priv_esc.rb
View File

@ -18,13 +18,14 @@ class MetasploitModule < Msf::Exploit::Local
This module attempts to gain root privileges on Deepin Linux systems
by using lastore-daemon to install a package.
The lastore-daemon D-Bus configuration on Deepin Linux 15.5 permits any
The lastore-daemon D-Bus configuration on Deepin Linux permits any
user in the sudo group to install arbitrary system packages without
providing a password, resulting in code execution as root. By default,
the first user created on the system is a member of the sudo group.
This module has been tested successfully with lastore-daemon version
0.9.53-1 on Deepin Linux 15.5 (x64).
This module has been tested successfully with lastore-daemon versions
0.9.53-1 on Deepin Linux 15.5 (x64); and
0.9.66-1 on Deepin Linux 15.7 (x64).
},
'License' => MSF_LICENSE,
'Author' =>