[Canvas] CANVAS 7.28 released

Immunity CANVAS canvas at immunityinc.com
Tue Mar 30 17:07:52 UTC 2021


########################################################################
#                       *CANVAS Release 7.28*                          #
########################################################################

*Date*: 30 March 2021

*Version*: 7.28

*Download URL*: https://canvas.immunityinc.com/getcanvas

*Release Notes*:

In this CANVAS release we are bringing you 4 new modules and bugfixes.

Our new modules include two local privilege escalation exploits
targeting Windows
(vstrwrite01_lpe, service_tracing_lpe), one LPE targeting Ubuntu/Debian
distros (sudo_heap_overflow) and a remote code execution exploit
targeting Microsoft Exchange Server (exchange_proxylogon_rce).

We updated our installation procedure information and also fixed our
Linux installer in order to support Ubuntu 20.04 and Kali 2021.1.


==Changes==

o Documentation fixes
 o Updated installation procedure and supported platforms

o Linux installer fix
 o Added support for Ubuntu 20.04 and Kali 2021.1

==New Modules==

o sudo_heap_overflow (CVE-2021-3156)

o vstrwrite01_lpe (CVE-2020-1054)

o service_tracing_lpe (CVE-2020-0668)

o exchange_proxylogon_rce (CVE-2021-26855)


########################################################################
########################################################################


More information about the Canvas mailing list