CVE-2019-13276 PoC — TRENDnet TEW-827DRU 缓冲区错误漏洞

Source

https://github.com/5l1v3r1/CVE-2019-13276

Associated Vulnerability

Title: TRENDnet TEW-827DRU 缓冲区错误漏洞 (CVE-2019-13276)
Description:TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.

Description

5.1.17之前的Linux内核中普通用户执行文件提权为root用户

Readme

# CVE-2019-13272
5.1.17之前的Linux内核中普通用户执行文件提权为root用户
![提权](https://github.com/Huandtx/CVE-2019-13272/blob/master/huandtx.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →