CVE-2017-12579

概要

参考情報

• m4.rkw.io/blog/cve201712579-local-root-privesc-in-hashicorp-vagrantvmwarefusion-4024.html · Exploit
• exploit-db.com/exploits/43223 · Exploit

vagrant vmware fusion のその他の脆弱性

• CVE-2017-16873高 7.8It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5.0.4 in order to esca…
• CVE-2017-16839高 7.0Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.
• CVE-2017-16512高 7.8The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted …
• CVE-2017-15884高 7.0In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin upd…
• CVE-2017-11741高 8.8HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows l…