high7.8Public exploit code
CVE-2018-18856
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LiquidVPN 1.36 / 1.37 - Privilege Escalation2018-11-05 · local · macos
Impact
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "openvpncmd" parameter as a shell command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Liquidvpn | Liquidvpn | through 1.37 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2018/Nov/1
- https://www.exploit-db.com/exploits/45782/
- http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2018/Nov/1
- https://www.exploit-db.com/exploits/45782/