Lucene search

K
canvasImmunity CanvasROOTPIPE
HistoryApr 10, 2015 - 2:59 p.m.

Immunity Canvas: ROOTPIPE

2015-04-1014:59:00
Immunity Canvas
exploitlist.immunityinc.com
19

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

14.6%

Name rootpipe
CVE CVE-2015-1130 Exploit Pack
VENDOR: Apple
Notes:

This is a local privilege escalation affecting all Mac OS X versions from 10.7
up to 10.10.2. We provide both a 32bit and 64bit version of the exploit.

Tested on:
- 10.10.1
- 10.9.5
- 10.9.4
- 10.9.3
- 10.9.2
- 10.9.1
- 10.9
- 10.7.2

Repeatability: Multiple Times
References: https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
CVE Url: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1130

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

14.6%