CVE-2015-6980

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

CVE-2015-6980

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

CVE-2015-6980

CVE-2015-6980 affects Apple OS X Directory Utility. OS X 10.11.0 and earlier mishandle authentication for new sessions, enabling local privilege escalation by a local attacker. Affected: Directory Utility in OS X before 10.11.1 (per CNVD entry and NVD description). Mitigation: upgrade to OS X 10....

Apple Mac OSX Entitlements - 'Rootpipe' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Apple OS X Entitlements Rootpipe Privilege Escalation', 'Description' = %q This module exploits the rootpipe vulnerability and...

Apple OS X Entitlements Rootpipe Privilege Escalation Exploit

This Metasploit module exploits the rootpipe vulnerability and bypasses Apple's initial fix for the issue by injecting code into a process with the 'admin.writeconfig' entitlement. This module requires Metasploit: http://metasploit.com/download Current source:...

CVE-2015-3673

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility...

CVE-2015-3673

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility...