high7.8Public exploit code
CVE-2017-12579
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation2017-12-06 · local · macos · Verified
Impact
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hashicorp | Vagrant Vmware Fusion | through 4.0.24 |
Weakness classification
References
- NVD record
- CVE.org record
- https://m4.rkw.io/blog/cve201712579-local-root-privesc-in-hashicorp-vagrantvmwarefusion-4024.html
- https://www.exploit-db.com/exploits/43223/
- https://m4.rkw.io/blog/cve201712579-local-root-privesc-in-hashicorp-vagrantvmwarefusion-4024.html
- https://www.exploit-db.com/exploits/43223/