CVE-2018-10057 | BDVDB-2026-101730 Detail

Description#

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/tintinweb/pub/tree/master/pocs/cve-2018-10057
http://www.openwall.com/lists/oss-security/2018/06/03/1

Exploit#

No public exploit known

History#

Version 12018-06-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.