EUVD-2018-19015

Malware in sbrugna...

EUVD-2018-19222

Malware in sbrugna...

XPC Interface Command Execution Root Privileges

The vulnerability of the XPC interface implementation for accessing the CactusVPN VPN service is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute system commands with root privileges...

CactusVPN root elevation of privilege vulnerability

CactusVPN for macOS is a macOS-based VPN software from CactusVPN Moldova for anonymous access to the Internet. privileged helper tool is one of the helper tools. A privileged helper tool vulnerability exists in CactusVPN 6.0 and earlier versions for macOS-based platforms. An attacker can exploit...

Privilege escalation

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root...

CVE-2018-7493

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root...

CVE-2018-7493

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root...

CVE-2018-7493

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root...

CVE-2018-7493

CVE-2018-7493 affects CactusVPN for macOS (version 6.0 and earlier) via a privileged helper tool. The tool exposes an XPC interface that allows arbitrary applications to execute system commands as root, enabling root privilege escalation. Connected sources (CNVD/NVD entries) corroborate the root-...

CVE-2018-7493: Undefined Security Weakness

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root...

CactusVPN system() elevation of privilege vulnerability

CactusVPN for macOS is a macOS-based VPN software from CactusVPN Moldova for anonymous access to the Internet. An elevation of privilege vulnerability exists in version 5.3.6 of CactusVPN for macOS-based platforms. An attacker can exploit the vulnerability to execute commands with root privileges...

Privilege escalation

CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. The binary takes a single command line argument and passes this argument to a system call, thus allowing low privileged users to execute commands as root...

CVE-2018-7281

CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. The binary takes a single command line argument and passes this argument to a system call, thus allowing low privileged users to execute commands as root...

CVE-2018-7281

CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. The binary takes a single command line argument and passes this argument to a system call, thus allowing low privileged users to execute commands as root...

CVE-2018-7281

CVE-2018-7281 affects CactusVPN 5.3.6 for macOS . A setuid root binary named runme takes a single command line argument and passes it to a system() call, enabling a low-privileged user to execute commands with root privileges . This is a root privilege escalation vulnerability. The provided docum...

PT-2018-1124

Name of the Vulnerable Software and Affected Versions CactusVPN versions through 6.0 for macOS Description The issue is related to the implementation of the XPC interface in the CactusVPN software, which is used to access the VPN service. This implementation has access control weaknesses...

PT-2018-17997

Name of the Vulnerable Software and Affected Versions CactusVPN version 5.3.6 Description The issue concerns a root privilege escalation through a setuid root binary called runme. This binary accepts a command line argument and passes it to a system call, allowing low-privileged users to execute...

CVE-2018-7281: Undefined Security Weakness

CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. The binary takes a single command line argument and passes this argument to a system call, thus allowing low privileged users to execute commands as root...