Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation

Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3985.tar 05252007-osxpppd.tar milw0rm.com 2007-05-25...

CVE-2007-0752: Undefined Security Weakness

The PPP daemon pppd in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check...

CVE-2006-2196: Undefined Security Weakness

Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges...

security flaw

The 1 libsasl and 2 libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASLPATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASLPATH to point to malicious programs...