ID:6336 - Exploit for Privilege escalation in vpnc - CVE-2018-10900

Link to public exploit:

Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to a newline character can be used to inject a Password helper parameter into the configuration data passed to vpnc. A local attacker can modify a system connection to execute arbitrary commands as root.

Remediation