CVE-2019-19585

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

• CWE-269

• http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_lpe.shExploit, Third Party Advisory
• https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_lpe.sh?token=Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_lpe.shExploit, Third Party Advisory
• https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_lpe.sh?token=Exploit, Third Party Advisory

Published

Jan 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19579An issue was discovered in Xen through 4.12.x allowing attac…6.8
• CVE-2019-1958A vulnerability in the web-based management interface of Cis…8.8
• CVE-2019-19580An issue was discovered in Xen through 4.12.x allowing x86 P…6.6
• CVE-2019-19581An issue was discovered in Xen through 4.12.x allowing 32-bi…6.5
• CVE-2019-19582An issue was discovered in Xen through 4.12.x allowing x86 g…6.5
• CVE-2019-19583An issue was discovered in Xen through 4.12.x allowing x86 H…7.5
• CVE-2019-19587In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs wh…6.1
• CVE-2019-19588The validators package 0.12.2 through 0.12.5 for Python ente…7.5
• CVE-2019-19589The Lever PDF Embedder plugin 4.4 for WordPress does not blo…9.8
• CVE-2019-1959Multiple vulnerabilities in Cisco Enterprise NFV Infrastruct…4.4
• CVE-2019-19590In radare2 through 4.0, there is an integer overflow for the…7.8
• CVE-2019-19592Jama Connect 8.44.0 is vulnerable to stored Cross-Site Scrip…6.1