CVE-2015-3673

EPSS 5.7%

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/38036/unverified exploitdbwww.exploit-db.com/exploits/38036unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html http://support.apple.com/kb/HT204942 https://www.exploit-db.com/exploits/38036/http://www.securityfocus.com/bid/75493 http://www.securitytracker.com/id/1032760