Skip to content

Commit 2edd597

Browse files
committed
version 1.1 released
1 parent d95305f commit 2edd597

File tree

2 files changed

+50
-2
lines changed

2 files changed

+50
-2
lines changed

CHANGELOG

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,52 @@
11

2+
linux-exploit-suggester.sh v1.1 [2020-01-07]
3+
4+
o Add more reliable DISTRO version detection (based on /etc/*-release files)
5+
6+
o Added following exploits:
7+
8+
+ add SystemTap exploit (CVE-2010-4170) (#46) [bcoles]
9+
10+
+ add abrt/sosreport-rhel7 exploit (#48) [bcoles]
11+
12+
+ add Return of the WIZard (exim) (CVE-2019-10149) (#54) [bcoles]
13+
14+
+ Add Serv-U FTP Server exploit (CVE-2019-12181) (#58) [bcoles]
15+
16+
+ Add PTRACE_TRACEME (CVE-2019-13272) (#61) [bcoles]
17+
18+
+ Add ktsuss (CVE-2011-2921) (#62) [bcoles]
19+
20+
+ Add rds_atomic_free_op NULL pointer dereference (CVE-2018-5333) (#67) [bcoles]
21+
22+
+ Add GNU Mailutils maidag url local root (CVE-2019-18862) (#69) [bcoles]
23+
24+
o Added following '--checksec' mode improvements:
25+
26+
+ add detection for kernel.yama.ptrace_scope (#49) [bcoles]
27+
28+
o Rewritten README.md. Displaying exposure (calculted based on rank) instead of raw numeric rank
29+
30+
o '--uname' mode improvement: do tagging and rank calculation also
31+
when LES is run with '--uname' switch. uname string contains
32+
distro name so we're bumping rank (+1) for each exploit that is
33+
known run on given distro. Also rank is bumped when there is
34+
kernel version match (+3).
35+
36+
o Refinements for following exploits:
37+
38+
+ add ntfs-3g version check: pkg=ntfs-3g,ver<2017.4 (#50) [bcoles]
39+
40+
+ update tested package versions for raceabrt (#47) [bcoles]
41+
42+
+ add udev version check pkg=udev,ver<141 (#51) [bcoles]
43+
44+
+ RationalLove fix: libc package is named 'libc6' on Debian/Ubuntu
45+
46+
+ Add nginx version check: pkg=nginx|nginx-full,ver<1.10.3 (#57) [bcoles]
47+
48+
+ rds_atomic_free_op exploit: update targets
49+
250
linux-exploit-suggester.sh v1.0 [2019-03-01]
351

452
o Added additional 'Tags' for multiple exploits based on:

linux-exploit-suggester.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
#!/bin/bash
22

33
#
4-
# Copyright (c) 2016-2019, mzet
4+
# Copyright (c) 2016-2020, @_mzet_
55
#
66
# linux-exploit-suggester.sh comes with ABSOLUTELY NO WARRANTY.
77
# This is free software, and you are welcome to redistribute it
88
# under the terms of the GNU General Public License. See LICENSE
99
# file for usage of this software.
1010
#
1111

12-
VERSION=v1.0
12+
VERSION=v1.1
1313

1414
# bash colors
1515
#txtred="\e[0;31m"

0 commit comments

Comments
 (0)