Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Privilege Escalation in Fedora Linux: Exploiting ABRT for Root

initblog.com

Post reply on HN
Print view View original

1–3 of 3 posts

Re: Privilege Escalation in Fedora Linux: Exploiting ABRT for Root

#2

Post by westurner » 

  g_autofree char *docker_inspect_cmdline = NULL;
  if (root_dir != NULL)
    docker_inspect_cmdline = g_strdup_printf("chroot %s /bin/sh -c \"docker inspect %s\"", root_dir, container_id);
  else
    docker_inspect_cmdline = g_strdup_printf("docker inspect %s", container_id);
What static and dynamic analysis tools and rules could have found this vuln?

Re: Privilege Escalation in Fedora Linux: Exploiting ABRT for Root

#3

Post by westurner »

westurner wrote: post #2

g_autofree char *docker_inspect_cmdline = NULL; if (root_dir != NULL) docker_inspect_cmdline = g_strdup_printf("chroot %s /bin/sh -c \"docker inspect %s\"", root_dir, container_id); else docker_inspect_cmdline = g_strdup_printf("docker inspect %s", container_id); What static and dynamic analysis tools and rules could have found this vuln?

Almost regex:

  .*cmd.*=.*printf.*%s
Post reply on HN