high7.8Public exploit code
CVE-2017-16777
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake applicati…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hashicorp vagrant-vmware-fusion 5.0.3 - Local Privilege Escalation2017-12-06 · local · macos · Verified
Impact
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hashicorp | Vagrant | Version 5.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://m4.rkw.io/blog/cve201716777-local-root-privesc-in-hashicorp-vagrantvmwarefusion-503.html
- https://www.exploit-db.com/exploits/43219/
- https://m4.rkw.io/blog/cve201716777-local-root-privesc-in-hashicorp-vagrantvmwarefusion-503.html
- https://www.exploit-db.com/exploits/43219/