27 matches found
EUVD-2016-5603
Malware in sbrugna...
CVE-2008-7303
The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...
CVE-2019-5013
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. The command takes a user-supplied string argument and executes launchctl under root context. A user with local access can use this...
CVE-2019-5013
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. The command takes a user-supplied string argument and executes launchctl under root context. A user with local access can use this...
CVE-2019-5013
CVE-2019-5013 describes a local privilege escalation in the Wacom macOS driver (version 6.3.32-3) where the update helper’s start/stopLaunchDProcess command executes user-supplied input via launchctl under root, enabling a local attacker to load arbitrary LaunchAgents. Cisco Talos details confirm...
CVE-2019-5013: Improper Neutralization of Argument Delimiters in a Command
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. The command takes a user-supplied string argument and executes launchctl under root context. A user with local access can use this...
The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges
The vulnerability of the libxpc component during the launchctl process in the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to increase their privileges locally...
CVE-2016-4617
An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component...
Design/Logic Flaw
An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component...
CVE-2016-4617
CVE-2016-4617 affects macOS prior to 10.12 through a sandbox-escape in the libxpc component, related to launchctl process spawning. Connected sources (e.g., CNVD-2017-02507, NVD entry, and Apple security content) corroborate that libxpc had multiple sandbox-spawning weaknesses exploitable to brea...
CVE-2016-4617: Undefined Security Weakness
An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...
CVE-2008-7303
The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...
Design/Logic Flaw
The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...
CVE-2008-7303: Undefined Security Weakness
The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...
Apple Mac OS X /sbin/service本地权限提升漏洞
Apple Mac OS X是苹果家族计算机所使用的操作系统。 Mac OS X的/sbin/service工具在调用其他程序时没有确认安全的运行环境，本地攻击者可能利用此漏洞提升自己的权限。 Mac OS X的writeconfig使用/sbin/service启动各种服务，但这个脚本在调用launchctl工具时没有过滤PATH环境变量。本地用户可以修改PATH指向恶意的launchctl程序导致以root用户权限执行任意二进制程序。 Apple Mac OS X 10.4.8 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...
Design/Logic Flaw
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program...
CVE-2007-0022: Undefined Security Weakness
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program...
