CVE-2017-16928

The arqupdater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip...

PT-2018-6367

Name of the Vulnerable Software and Affected Versions: Arq versions 5.10 and earlier Description: The issue allows local users to gain root privileges by writing to arbitrary files via a crafted update URL. This can be achieved by using a malicious URL, such as file:///tmp/blah/Arq.zip, to exploi...

Haystack Arq for Mac helper app elevation of privilege vulnerability

Haystack Arq for Mac is a Mac-based file backup software from Haystack Software, USA. arqupdater and others are among the components. Mac-based Haystack Software Arq 5.10 before the 5.x version of several helper app has a security vulnerability. A local attacker can exploit the vulnerability to...

CVE-2017-16895

The 1 arqupdater, 2 arqcommitter, 3 standardrestorer, 4 arqglacierrestorer, and 5 arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet...

PT-2017-14624

Name of the Vulnerable Software and Affected Versions Arq versions 5.x before 5.10 Description The issue allows local users to gain root privileges via a crafted data packet, affecting several helper apps in Arq, including arq updater, arqcommitter, standardrestorer, arqglacierrestorer, and...