PT-2015-6307

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description A race condition in kext tools allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation. Recommendations For Apple OS X...

CVE-2015-3709: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation...

CVE-2015-3708: Undefined Security Weakness

kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink attack...

Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...

Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...

Apple Mac OSX 10.9.5 - IOKit IntelAccelerator Null Pointer Dereference

Apple Mac OSX 10.9.5 - IOKit IntelAccelerator Null Pointer Dereference // clang -o ig23exploit ig23exploit.c -framework IOKit -framework CoreFoundation -m32 -DFORTIFYSOURCE=0 // ianbeer include include include include include include include include uint64t kernelsymbolchar sym char cmd1024;...

OS X 10.9.5 IOKit IntelAccelerator NULL Pointer Dereference

Exploit for iOS platform in category local exploits // clang -o ig23exploit ig23exploit.c -framework IOKit -framework CoreFoundation -m32 -DFORTIFYSOURCE=0 // ianbeer include include include include include include include include uint64t kernelsymbolchar sym char cmd1024; strcpycmd, "nm -g...

Apple Mac OSX 10.9.5 - IOKit IntelAccelerator Null Pointer Dereference

// clang -o ig23exploit ig23exploit.c -framework IOKit -framework CoreFoundation -m32 -DFORTIFYSOURCE=0 // ianbeer include include include include include include include include uint64t kernelsymbolchar sym char cmd1024; strcpycmd, "nm -g /machkernel | grep "; strcatcmd, sym; strcatcmd, " | cut...

VMWare Fusion <= 2.0.5 vmx86 kext local kernel root exploit

No description provided by source. / vmware-fission.c Copyright c 2009 by [email protected] VMware Fusion = 2.0.5 vmx86 kext local kernel root exploit by mu-b - Tue 23 June 2009 - Tested on: VMware Fusion 2.0.4 10.5.x VMware Fusion 2.0.5 10.5.x http://seclists.org/fulldisclosure/2009/Oct/29...

VMWare Fusion <= 2.0.5 vmx86 kext local PoC

No description provided by source. / vmware-pop.c Copyright c 2009 by [email protected] VMware Fusion = 2.0.5 vmx86 kext local denial of service POC by mu-b - Mon 22 June 2009 - Tested on: VMware Fusion 2.0.4 10.5.x VMware Fusion 2.0.5 10.5.x http://seclists.org/fulldisclosure/2009/Oct/29...

Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...

Authorization

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to 1 load or 2 unload kernel extensions via a crafted message...

CVE-2013-5145

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to 1 load or 2 unload kernel extensions via a crafted message...

CVE-2013-5145

CVE-2013-5145 involves kextd in Apple iOS before 7, where IPC message authorization is not properly verified. This allows a local attacker to load or unload kernel extensions via a crafted message, representing a local privilege escalation risk. Root cause: missing authorization checks in kextd’s...

CVE-2013-5145

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to 1 load or 2 unload kernel extensions via a crafted message...

PT-2013-5391

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue concerns the kextd in Kext Management, which does not properly verify authorization for IPC messages. This allows local users to load or unload kernel extensions via a crafted message...

CVE-2013-5145: Undefined Security Weakness

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to 1 load or 2 unload kernel extensions via a crafted message...

Apple iOS < 7.0 Multiple Vulnerabilities

Binary data 8013.prm...

VMWare Fusion <= 2.0.5 vmx86 kext local kernel root exploit

Exploit for unknown platform in category local exploits =========================================================== VMWare Fusion include include include include include include include mach/...

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation / vmware-fission.c Copyright c 2009 by VMware Fusion include include include include include include include include include ifndef IOCPARMMASK define IOCPARMMASK 0x1FFF endif ifndef IOCPARMLEN define IOCPARMLENa a 16 & IOCPARMMASK endi...