Nginx Local Privilege Escalation Vulnerability Technical Analysis and Solution – 绿盟科技技术博客
Tags
| country: | Japan |
| attack-pattern: | Data Direct Indirect Cron - T1053.003 Server - T1583.004 Server - T1584.004 Trap - T1546.005 Connection Proxy - T1090 Sudo - T1169 Trap - T1154 |
Common Information
| Type | Value |
|---|---|
| UUID | eb86fa8d-3577-4a6f-a472-0104b65ad1bd |
| Fingerprint | bce1f155ea052c83 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 8, 2016, 6:29 p.m. |
| Added to db | Jan. 18, 2023, 7:37 p.m. |
| Last updated | Nov. 17, 2024, 6:30 p.m. |
| Headline | Nginx Local Privilege Escalation Vulnerability Technical Analysis and Solution |
| Title | Nginx Local Privilege Escalation Vulnerability Technical Analysis and Solution – 绿盟科技技术博客 |
| Detected Hints/Tags/Attributes | 56/2/31 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 4 | cve-2016-1247 |
|
| Details | Domain | 9 | legalhackers.com |
|
| Details | Domain | 4 | zh.wikipedia.org |
|
| Details | Domain | 2 | nginxed-root.sh |
|
| Details | Domain | 1373 | twitter.com |
|
| Details | Domain | 3 | privesclib.so |
|
| Details | Domain | 117 | ld.so |
|
| Details | Domain | 2 | nnginxed-root.sh |
|
| Details | Domain | 2 | privesc.so |
|
| Details | Domain | 2 | sources.debian.net |
|
| Details | Domain | 12 | launchpad.net |
|
| Details | Domain | 6 | cloud.nsfocus.com |
|
| Details | Domain | 13 | www.nsfocusglobal.com |
|
| Details | 5 | dawid@legalhackers.com |
||
| Details | File | 2 | nginx-exploit-deb-root-privesc-cve-2016-1247.html |
|
| Details | File | 2 | path_to_nginx_error.log |
|
| Details | File | 2 | path_to_error.log |
|
| Details | File | 91 | access.log |
|
| Details | File | 49 | error.log |
|
| Details | Url | 2 | http://legalhackers.com/advisories/nginx-exploit-deb-root-privesc-cve-2016-1247.html |
|
| Details | Url | 1 | https://zh.wikipedia.org/wiki/nginx. |
|
| Details | Url | 5 | https://legalhackers.com |
|
| Details | Url | 4 | https://twitter.com/dawid_golunski |
|
| Details | Url | 2 | https://legalhackers.com/advisories/nginx-exploit-deb-root-privesc-cve-2016-1247.html |
|
| Details | Url | 2 | https://legalhackers.com/videos/nginx-exploit-deb-root-privesc-cve-2016-1247.html |
|
| Details | Url | 2 | https://sources.debian.net/src/nginx |
|
| Details | Url | 2 | https://launchpad.net/ubuntu/+source/nginx/1.10.1-0ubuntu1.1 |
|
| Details | Url | 2 | https://launchpad.net/ubuntu/+source/nginx/1.10.0-0ubuntu0.16.04.3 |
|
| Details | Url | 2 | https://launchpad.net/ubuntu/+source/nginx/1.4.6-1ubuntu3.6 |
|
| Details | Url | 6 | https://cloud.nsfocus.com/# |
|
| Details | Url | 4 | http://www.nsfocusglobal.com |