N/A

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMBIOC_TREE_RELE ioctl. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4984.

N/A

释放后使用

Joyent SmartOS 安全漏洞

Joyent SmartOS是美国Joyent公司的一套开源的操作系统。 Joyent SmartOS release-20170803-20170803T064301Z版本中的SMBIOC_TREE_RELE ioctl存在安全漏洞，该漏洞源于程序在对对象执行操作之前没有检测对象是否存在。攻击者可利用该漏洞提升权限，执行代码。

N/A

N/A