CVE-2024-11003

This PoC exploits CVE-2024-11003 in needrestart before version 3.8, where unsanitized input passed to Modules::ScanDeps allows local command execution. The exploit leverages a malicious configuration file to achieve root-level command execution when needrestart is run with sudo.

This PoC exploits a vulnerability in needrestart by creating a malicious Perl script and replacing it with a bash binary to gain a shell. The exploit relies on needrestart's handling of executable files.