This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to [email protected] (e469cf49-4de3-4658-8419-ab42837916ad). An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the docker API. The process does not properly validate user-supplied data which can allow for the upload of arbitrary files. An attacker can leverage this vulnerability to execute arbitrary code under the context of root. Was ZDI-CAN-3853.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: zdi
Published: 2017-10-31T19:00:00
Updated: 2024-08-05T17:50:12.720Z
Reserved: 2017-07-05T00:00:00
Link: CVE-2017-10940
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-31T19:29:00.210
Modified: 2024-11-21T03:06:47.647
Link: CVE-2017-10940
Redhat
No data.