CVE-2021-29005: High severity rConfig rConfig vulnerability
Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rConfig apache user/chmod privilege issueto a version that resolves this vulnerability.Fixed in 3.9.6
Event History
Frequently Asked Questions
What is CVE-2021-29005?
CVE-2021-29005 is a vulnerability in rConfig server 3.9.6 that allows an attacker with low privilege to gain root access on the server.
How severe is CVE-2021-29005?
CVE-2021-29005 is classified as critical with a severity score of 8.8.
Which software version is affected by CVE-2021-29005?
rConfig server 3.9.6 is affected by CVE-2021-29005.
How can an attacker exploit CVE-2021-29005?
An attacker with low privilege can exploit CVE-2021-29005 by executing chmod as root without a password, potentially gaining root access on the server.
Is there a proof of concept for CVE-2021-29005?
Yes, there is a proof of concept script available at https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29005-POC.sh