MOAB-15-01-2007: Multiple Mac OS X Local Privilege Escalation Vulnerabilities

Summary Multiple binaries inside the /Applications directory tree are setuid root, but remain writable by users in the admin group ex. first user by default in a non-server Mac OS X installation, allowing privilege escalation. A malicious user can overwrite the binaries and perform a disk...