CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In addition, the SUID bit must be added to this file.

• CWE-250

• https://blog.hackvens.fr/advisories/CVE-2024-34477-Fogproject.htmlExploit, Third Party Advisory
• https://forums.fogproject.org/topic/17486/fog-1-5-10-and-earlier-nfs-privilege-escalation-vulnerabilityExploit, Vendor Advisory
• https://github.com/FOGProject/fogproject/blob/a4bb1bf39ac53c3cbe623576915fbc3b5c80a00f/lib/common/functions.sh#L1360Product
• https://blog.hackvens.fr/advisories/CVE-2024-34477-Fogproject.htmlExploit, Third Party Advisory
• https://forums.fogproject.org/topic/17486/fog-1-5-10-and-earlier-nfs-privilege-escalation-vulnerabilityExploit, Vendor Advisory
• https://github.com/FOGProject/fogproject/blob/a4bb1bf39ac53c3cbe623576915fbc3b5c80a00f/lib/common/functions.sh#L1360Product

Published

May 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34471An issue was discovered in HSC Mailinspector 5.2.17-3. A Pat…5.4
• CVE-2024-34472An issue was discovered in HSC Mailinspector 5.2.17-3 throug…5.5
• CVE-2024-34473An issue was discovered in appmgr in O-RAN Near-RT RIC I-Rel…5.3
• CVE-2024-34474Clario through 2024-04-11 for Desktop has weak permissions f…7.8
• CVE-2024-34475Open5GS before 2.7.1 is vulnerable to a reachable assertion …7.5
• CVE-2024-34476Open5GS before 2.7.1 is vulnerable to a reachable assertion …5.3
• CVE-2024-34478btcd before 0.24.0 does not correctly implement the consensu…7.5
• CVE-2024-34479SourceCodester Computer Laboratory Management System 1.0 all…9.8
• CVE-2024-3448Users with low privileges can perform certain AJAX actions. …5
• CVE-2024-34480SourceCodester Computer Laboratory Management System 1.0 all…9.8
• CVE-2024-34481drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via com…6.1
• CVE-2024-34483OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows…7.5