Sploitus

CVE-2019-19585

9 known exploits for CVE-2019-19585

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

Affected products
Apache, Rconfig
Rconfig
= 3.9.3
CVSS 3.1
7.8 HIGH
EPSS
5.7% (93th percentile)
Weakness
CWE-269
NVD status
Modified
Published
2020-01-06
CVE-2019-19585 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2019-19585

Proof-of-concept code and exploit modules indexed by Sploitus

exploits-rconfig
2026-08-27 KitPloitKITPLOIT
rConfig 3.9.4 - (searchField) Unauthenticated Root Remote Code Execution Exploit
2020-03-28 vikingfrZDT
rConfig 3.9.4 searchField Remote Code Execution
2020-03-28 vikingfrPACKETSTORM
rConfig 3.9.4 - searchField Unauthenticated Root Remote Code Execution
2020-03-27 vikingfrEXPLOITPACK
rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
2020-03-27 vikingfrEXPLOITDB
Rconfig 3.x Chained Remote Code Execution Exploit
2020-03-17 metasploitZDTRuby
Rconfig 3.x Chained Remote Code Execution
2020-03-16 Orange CyberdefensePACKETSTORMRuby
Rconfig 3.x Chained Remote Code Execution
2020-03-11 Jean-Pascal Thomas, Orange CyberdefenseMETASPLOITRuby
Exploit for OS Command Injection in Rconfig
2019-12-02 v1k1ngfrGITHUB