high7.2Public exploit code
CVE-2015-3673
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX Entitlements - 'Rootpipe' Local Privilege Escalation (Metasploit)2015-08-31 · local · osx · Verified
Impact
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.10.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
- http://support.apple.com/kb/HT204942
- http://www.securityfocus.com/bid/75493
- http://www.securitytracker.com/id/1032760
- https://www.exploit-db.com/exploits/38036/
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
- http://support.apple.com/kb/HT204942
- http://www.securityfocus.com/bid/75493
- http://www.securitytracker.com/id/1032760
- https://www.exploit-db.com/exploits/38036/