high7.8
CVE-2017-2675
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part.
Impact
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Obdev | Little Snitch | Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1 |
| Objective Development | Little Snitch | Versions 3.6.2, 3.6.3, 3.6.4, 3.7, 3.7.1, 3.7.2 |