PT-2017-10547 · Ntfs-3G+3 · Ntfs-3G+3

Jann Horn · Published 2017-02-01 · Updated 2021-09-07 · CVE-2017-0358

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NTFS-3G (affected versions not specified)

Description A local user can exploit a flaw in NTFS-3G to escalate local root privileges. The issue arises because NTFS-3G does not scrub the environment before executing modprobe with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALT-PU-2017-1420

CVE-2017-0358

DLA-815-1

DSA-3780-1

OPENSUSE-SU-2018_3696-1

SUSE-SU-2018:2070-1

SUSE-SU-2018:3587-1

SUSE-SU-2018:3587-2

SUSE-SU-2018_2070-1

SUSE-SU-2018_3587-1

SUSE-SU-2018_3587-2

SUSE-SU-2021:2965-1

SUSE-SU-2021_2965-1

USN-3182-1

Affected Products

Alt Linux

Ntfs-3G

Suse

Ubuntu

References · 50

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ntfs3g_priv_esc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/41356 · Exploit
• 🔥 https://exploit-db.com/exploits/41240 · Exploit
• 🔥 https://marc.info/?l=oss-security&m=148594671929354&w=2 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2018:3587-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-0358 · Security Note
• https://ubuntu.com/security/notices/USN-3182-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2070-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3182-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:2965-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-0358 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0358 · Vendor Advisory
• https://debian.org/security/2017/dsa-3780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-0358 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-0358 · Vendor Advisory