mirror of
https://github.com/Mr-xn/Penetration_Testing_POC.git
synced 2026-05-09 22:37:49 +08:00
add CVE-2019-0211-apache
This commit is contained in:
@@ -0,0 +1,25 @@
|
||||
# CARPE (DIEM): CVE-2019-0211 Apache Root Privilege Escalation
|
||||
|
||||
This is a local root exploit for Apache HTTPd.
|
||||
Details [here](https://cfreal.github.io/carpe-diem-cve-2019-0211-apache-local-root.html).
|
||||
This is a POC. It might fail for a dozen of reasons. PR welcome.
|
||||
|
||||
# Targets
|
||||
|
||||
The exploit has been tested and works on:
|
||||
|
||||
#### Ubuntu 18.04.2 LTS
|
||||
PHP : 7.1.27-1 / 7.2.15-0 / 7.3.3-1<br />
|
||||
Apache : Apache/2.4.29 (Ubuntu), build 2018-03-02T02:19:31
|
||||
|
||||
#### Ubuntu 16.04.6 LTS
|
||||
PHP : 7.1.27-1 / 7.2.16-1 / 7.3.3-1<br />
|
||||
Apache : Apache/2.4.18 (Ubuntu), build 2016-04-15T18:00:57
|
||||
|
||||
#### Debian GNU/Linux 9.8 (stretch)
|
||||
PHP : 7.1.27-1 / 7.2.16-1 / 7.3.3-1<br />
|
||||
Apache : Apache/2.4.25 (Debian), build 2018-11-03T18:46:19
|
||||
(latest version when debian-security repo is disabled)
|
||||
|
||||
From:https://github.com/cfreal/exploits/tree/master/CVE-2019-0211-apache
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user