CVE-2018-1111 PoC — Red Hat Enterprise Linux 命令注入漏洞

Source

https://github.com/knqyf263/CVE-2018-1111

Associated Vulnerability

Title:Red Hat Enterprise Linux 命令注入漏洞 (CVE-2018-1111)
Description:DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Description

Environment for DynoRoot (CVE-2018-1111)

Readme

# CVE-2018-1111
Environment for CVE-2018-1111

## Movie

![demo](imgs/cve-2018-1111.gif)

## Command

### docker-compose
```
$ docker-compose up -d
```

### Attacker

```
$ docker-compose exec attacker bash
[root@attacker /]# /scripts/attack.sh
Ncat: Version 7.50 ( https://nmap.org/ncat )
Ncat: Listening on :::1337
Ncat: Listening on 0.0.0.0:1337
```

### Victim
```
$ docker-compose exec victim bash
[root@victim /]# /scripts/victim.sh
Connection 'eth0' (90e3f2ae-e210-446d-8dfb-3f87510ab736) successfully added.
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/1)
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!