CVE-2018-1000857 Path traversal in n/a
A local unprivileged user can escalate privileges to root via directory traversal in the log-user-session SUID binary.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-1000857?
CVE-2018-1000857 is a high-severity path traversal vulnerability in n/a, published on 20 Dec 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.
Weakness: CWE-22
Which versions are affected by CVE-2018-1000857?
It affects 1 product.
Products include Open-Systems Log-User-Session.
How do I fix CVE-2018-1000857?
No fix has been published for CVE-2018-1000857 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2018-1000857 being exploited?
There is no known exploitation of CVE-2018-1000857 in the wild and no public exploit code.
Sources
Also known as GHSA-prfx-7p6p-8g3m.