3 ms·
How would privilege escalation work in this case?
by smithza 6y ago
How would privilege escalation work in this case?
- drjasonharrison 6y agoRegarding the older CVE-2020-8816: The code sent in the request is executed using sudo. From there, the code can use curl/wget to download a script from a specified server, and execute the script as root and take over the device. For this CVE, here is a description: https://frichetten.com/blog/cve-2020-11108-pihole-rce/ https://frichetten.com/blog/cve-2020-11108-pihole-rce/