0 day: a detailed analysis of the macOS platform Shimo VPN Multiple privilege elevation vulnerability-vulnerability warning-the black bar safety net

One, overview The Cisco Talos team recently disclosed Shimo VPN help tool Helper Tool a series of holes. Shimo VPN is the macOS platform a very popular VPN client that can in one application to connect multiple VPN accounts. These particular vulnerabilities were in the help tool, this is the Shim...

CVE-2008-7303

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...

PT-2011-3183

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5.x through 10.7.x Description The issue concerns the kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles, which fail to propagate restrictions to all created processes. This allows remote attackers to access...