Privilege Escalation Vulnerability in OSSEC by Trend Micro
CVE-2014-5284
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2014-5284?
The vulnerability in OSSEC affects versions before 2.8.1, where the host-deny.sh script creates temporary files with predictable filenames. This oversight allows local users to manipulate access controls by creating these files prior to the execution of IP blocking, leading to unauthorized modifications in hosts.deny and potentially escalating their privileges to root.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.