EyesOfNetwork Privilege Escalation Vulnerability via Nmap

A privilege escalation vulnerability has been identified in EyesOfNetwork (EON) versions through 5.3.11. This issue arises because Nmap can be executed with root privileges, allowing an attacker to gain complete control over the server.

Impact

Exploitation of this vulnerability leads to unauthorized privilege escalation, allowing an attacker to gain root access and full control over the affected server.

Reproduction

The vulnerability can be reproduced by running Nmap on a server with EyesOfNetwork installed. Since Nmap is allowed to run as root, this could be done by an authenticated user or potentially an unauthenticated user, depending on the server's configuration.