CVE-2024-32019 Proof of Concept (Python)

A Python implementation of the Local Privilege Escalation (LPE) exploit for Netdata (CVE-2024-32019).

This script exploits a vulnerability in the ndsudo component where the PATH environment variable is not properly sanitized. This allows a local attacker to execute arbitrary commands as root by hijacking allowed binaries (such as nvme-list, ip, gem, etc. modify it as you need in the begining of the code).

⚠️ Disclaimer

FOR EDUCATIONAL PURPOSES ONLY. This code is intended for security researchers, CTF players, and system administrators to test their own systems. The author takes no responsibility for any misuse of this code. Do not use this against systems you do not have permission to test.

🚀 Features

• Pure Python: No external dependencies required (uses standard library).
• Auto-Discovery: Automatically locates the ndsudo binary in common installation paths (modify it if necessary)
• Smart Brute-force: Unlike the original script which might target a single command, this script iterates through a list of known allowed commands (including nvme-list, ip, gem, node, npm, etc.) to maximize success rate.
• Auto-Cleanup: Removes the malicious payload from the disk after execution.

📋 Prerequisites

• Access to the target machine as a low-privileged user.
• Python 3 installed on the target machine.
• A vulnerable version of Netdata installed.

🛠️ Usage

1. Clone the repository (or copy exploit.py to the target machine):
   root@kitploit:~

   git clone https://github.com/julichaan/CVE-2024-32019-ndsudo-local-privilege-escalation-NetData.git
   cd CVE-2024-32019-Python
   python3 poc.py