CVE-2019-12577 Privilege escalation in n/a
A local attacker can exploit insecure file permissions in the PIA VPN client to execute arbitrary code with root privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-12577?
CVE-2019-12577 is a high-severity vulnerability in n/a, published on 11 Jul 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The macOS binary openvpn_launcher.64 is setuid root. This binary creates /tmp/pia_upscript.sh when executed. Because the file creation mask (umask) is not reset, the umask value is inherited from the calling process. This value can be manipulated to cause the privileged binary to create files with world writable permissions. A local unprivileged user can modify /tmp/pia_upscript.sh during the connect process to execute arbitrary code as the root user.
Weakness: CWE-732
Which versions are affected by CVE-2019-12577?
It affects 1 product.
Products include Londontrustmedia Private Internet Access Vpn Client.
How do I fix CVE-2019-12577?
No fix has been published for CVE-2019-12577 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-12577 being exploited?
There is no known exploitation of CVE-2019-12577 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cmq2-x9rv-c486.