Apache HTTP [2.4.17-2.4.38] Local Root Privilege Escalation
该报告还没有中文解读。
原文摘录
摘自原文(16763 字符中的一小部分)
I reported a Local Root privilege escalation vulnerability on Apache HTTPd at the beginning of the year. Apache has now patched it, [as you can see here](https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2019-0211). The vulnerability affects mod_prefork, mod_event, and mod_worker, the …
原文中的代码
(gdb) p *ap_scoreboard_image
$3 = {
global = 0x7f4a9323e008,
parent = 0x7f4a9323e020,
servers = 0x55835eddea78
}
(gdb) p ap_scoreboard_image->servers[0]
$5 = (worker_score *) 0x7f4a93240820默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @real · 版权归作者与 Internet Bug Bounty 所有