privilege escalation · Issue #4327 · rustdesk/rustdesk · GitHub

1 year ago

source link: https://github.com/rustdesk/rustdesk/issues/4327
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Contributor

Bug Description

changing settings without privileges.
(linux desktop)

How to Reproduce

service started as root
run rustdesk from anywhere other than /usr
bingo we change the service settings without any rights!.

Expected Behavior

The application client should never be able to change server settings!

Operating system(s) on local side and remote side

linux EL8 (RL8)

RustDesk Version(s) on local side and remote side

1.2.0+ local: nightly as of today

Screenshots

Additional Context

#4273

Recommend

blog.ripstech.com 7 years ago
Cache

Joomla! 3.8.3: Privilege Escalation via SQL Injection

blog.ripstech.com 7 years ago
Cache

Privilege Escalation in 2.3M WooCommerce Shops

105

Github github.com 7 years ago
Cache

GitHub - hc0d3r/sudohulk: try privilege escalation changing sudo command

README.md Sudohulk This tool change sudo command, hooking the execve syscall using ptrace, tested under bash and zsh supported architectures: x86_64 x86

Github github.com 6 years ago
Cache

GitHub - AlessandroZ/BeRoot: Privilege Escalation Project - Windows / Linux / Ma...

README.md BeRoot Project BeRoot Project is a post exploitation tool to check common misconfigurations to find a way to escalate our privilege. It has been added to the

Github github.com 6 years ago
Cache

GitHub - hausec/ADAPE-Script: Active Directory Assessment and Privilege Escalati...

README.md Active Directory Assessment and Privilege Escalation Script

www.tuicool.com 6 years ago
Cache

Privilege Escalation in gVisor, Google's Container Sandbox

tl;dr gVisor is Google’s sandboxing technology for containers running less-than-fully-trusted code. It’s a Golang reimplementation of the Linux kernel that runs in usersp...

Github github.com 6 years ago
Cache

GitHub - initstring/dirty_sock: Ubuntu Linux privilege escalation exploit (CVE-2...

README.md dirty_sock: Privilege Escalation in Ubuntu (via snapd) In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local...

Github github.com 3 years ago
Cache

Github GitHub - antonioCoco/RemotePotato0: Just another "Won't Fix" Wi...

RemotePotato0 Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly:

Github github.com 3 years ago
Cache

GitHub - hlldz/CVE-2021-1675-LPE: Local Privilege Escalation Edition for CVE-202...

Local Privilege Escalation Edition of CVE-2021-1675 Local Privilege Escalation implementation of the CVE-2021-1675 (a.k.a PrintNightmare). The exploit is edited from published by Zhiniang Peng (@edwardzpeng) & Xuefeng Li (@lxf029...

gist.github.com 2 years ago
Cache

Privilege Escalation using KrbRelay and RBCD · GitHub

KrbRelay with RBCD Privilege Escalation HOWTO Short HOWTO about one use case of the work from Cube0x0 (KrbRelay) and others. TL;DR No-Fix Local Privilege Es...