Unrated severityNVD Advisory· Published May 27, 2024· Updated Feb 13, 2025

CVE-2024-34477

Description

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In addition, the SUID bit must be added to this file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FOG/FOGdescription
Fogproject/Fogllm-fuzzy
Range: <=1.5.10

Patches

Vulnerability mechanics

References

blog.hackvens.fr/advisories/CVE-2024-34477-Fogproject.htmlmitre
forums.fogproject.org/topic/17486/fog-1-5-10-and-earlier-nfs-privilege-escalation-vulnerabilitymitre
github.com/FOGProject/fogproject/blob/a4bb1bf39ac53c3cbe623576915fbc3b5c80a00f/lib/common/functions.shmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000