My exploit for CVE-2024-48990. Full details of how I made this are on my blog.# CVE-2024-48990 Exploit
My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on [my blog](https://ally-petitt.com/en/posts/2024-12-25_Rediscovering-CVE-2024-48990-and-Crafting-My-Own-Exploit.md).
Essentially, you can `git clone` this repository into an attacker-controlled directory, `export PYTHONPATH=<attacker_directory>`, and then run `main.py` with that `PYTHONPATH` value set. Then, set up a netcat listener on 127.0.0.1:1337 and wait for a cron job or system administrator to run a `sudo apt install` on the system to see a root shell in your listener.
[4.0K] /data/pocs/7c1f4940b64ab96accefcf39dfaa51531fee5c3c
├── [4.0K] importlib
│ └── [ 124] __init__.py
├── [1.0K] LICENSE
├── [ 19] main.py
└── [ 619] README.md
1 directory, 4 files