CVEs-PoC/2017/CVE-2017-1000082.md

CVE-2017-1000082

Description

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.

POC

Reference

No PoCs from references.

Github

• https://github.com/CoolerVoid/master_librarian
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/flyrev/security-scan-ci-presentation
• https://github.com/grafeas/kritis