Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

Apple OS X Directory Utility Privilege Gain Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the Directory Utility in Apple OS X 10.11.0 and earlier versions, which arises from the program failing to properly handle authentication for new sessions. A local attacker could...

CVE-2015-6980

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

CVE-2015-6980

CVE-2015-6980 affects Apple OS X Directory Utility. OS X 10.11.0 and earlier mishandle authentication for new sessions, enabling local privilege escalation by a local attacker. Affected: Directory Utility in OS X before 10.11.1 (per CNVD entry and NVD description). Mitigation: upgrade to OS X 10....

CVE-2015-6980

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

CVE-2015-6980: Undefined Security Weakness

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

Apple Mac OSX Entitlements - 'Rootpipe' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Apple OS X Entitlements Rootpipe Privilege Escalation', 'Description' = %q This module exploits the rootpipe vulnerability and...

Apple OS X Entitlements Rootpipe Privilege Escalation Exploit

This Metasploit module exploits the rootpipe vulnerability and bypasses Apple's initial fix for the issue by injecting code into a process with the 'admin.writeconfig' entitlement. This module requires Metasploit: http://metasploit.com/download Current source:...

CVE-2015-3673

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility...

CVE-2015-3673

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility...

CVE-2015-3673: Undefined Security Weakness

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility...