CVE-2023-1326
HIGHapport < 2.26.0 - Privilege Escalation via Terminal Size Manipulation
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2023-1326. PoCs published by diego-tella, h3x0v3rl0rd, cve-2024.
AI-analyzed exploit summary This PoC demonstrates a local privilege escalation (LPE) vulnerability in apport-cli 2.26.0 by exploiting the pager (less) to escape to a shell when invoked with sudo. The attack requires specific configurations, including sudo access to apport-cli and less as the pager.
Description
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
Exploits (4)
This PoC demonstrates a local privilege escalation (LPE) vulnerability in apport-cli 2.26.0 by exploiting the pager (less) to escape to a shell when invoked with sudo. The attack requires specific configurations, including sudo access to apport-cli and less as the pager.
This PoC demonstrates a local privilege escalation (LPE) vulnerability in apport-cli 2.26.0 by exploiting improper handling of the pager (less) when invoked via sudo. The attack leverages terminal size manipulation to escape to a shell with elevated privileges.
This PoC demonstrates a local privilege escalation (LPE) vulnerability in apport-cli 2.26.0 by exploiting the pager (less) to execute arbitrary commands when sudo is misconfigured. The attack involves invoking apport-cli with a crash file and escaping to a shell via the pager.
This PoC demonstrates a local privilege escalation (LPE) vulnerability in apport-cli 2.26.0 by exploiting the pager (less) to escape to a shell when invoked via sudo. The attack requires specific configurations in sudoers and terminal settings.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H