Jenkins Vulnerability Exploited to Deliver 'Kerberods' Malware

guest · May 8, 2019

Jenkins Vulnerability Exploited to Deliver 'Kerberods' Malware
May 8, 2019
https://www.securityweek.com/jenkins-vulnerability-exploited-deliver-kerberods-malware

According to the SANS Institute’s Internet Storm Center, the attacks involve CVE-2018-1000861, a vulnerability affecting the Stapler HTTP request handling engine, which is used by the Jenkins open source software development automation server.

The researchers who discovered the security hole have made public some technical details and explained how it could be chained with other flaws for unauthenticated remote code execution.
According to SANS handler Renato Marinho, a proof-of-concept (PoC) exploit for CVE-2018-1000861 was released in early March.

The malware, packaged with a custom version of the UPX packer, attempts to obtain root privileges on the compromised system, which it uses to hide and ensure persistence. If it obtains root permissions, Kerberods loads a library into the operating system that hooks various functions of Glibc, acting like a rootkit.
Click to expand...

Log in or Sign up

Jenkins Vulnerability Exploited to Deliver 'Kerberods' Malware

guest Guest

Log in or Sign up

Jenkins Vulnerability Exploited to Deliver 'Kerberods' Malware

guest Guest

Useful Searches