EUVD-2018-2268

Malware in sbrugna...

CVE-2018-10192

IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The com.ipvanish.osx.vpnhelper LaunchDaemon implements an insecure XPC service that could allow an attacker to execute arbitrary code as the root user. IPVanish uses a third-party library for converting xpcobjectt...

IPVanish for macOS elevation of privilege vulnerability

IPVanish for macOS is a VPN software for anonymous access to the Internet based on the macOS platform. An elevation of privilege vulnerability exists in version 3.0.11 of IPVanish for macOS-based platforms, which stems from the 'com.ipvanish.osx.vpnhelper' LaunchDaemon implementation of the...

Privilege escalation

IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The com.ipvanish.osx.vpnhelper LaunchDaemon implements an insecure XPC service that could allow an attacker to execute arbitrary code as the root user. IPVanish uses a third-party library for converting xpcobjectt...

CVE-2018-10192

IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The com.ipvanish.osx.vpnhelper LaunchDaemon implements an insecure XPC service that could allow an attacker to execute arbitrary code as the root user. IPVanish uses a third-party library for converting xpcobjectt...

CVE-2018-10192

IPVanish 3.0.11 for macOS contains a root privilege escalation due to an insecure XPC service in the com.ipvanish.osx.vpnhelper LaunchDaemon. The component does not validate incoming connections, allowing any local application to send XPC messages. In the VPNHelperConnect path (used on establishi...

CVE-2018-10192

IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The com.ipvanish.osx.vpnhelper LaunchDaemon implements an insecure XPC service that could allow an attacker to execute arbitrary code as the root user. IPVanish uses a third-party library for converting xpcobjectt...