Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0171. PoCs published by Neeko Oni.
AI-analyzed exploit summary This exploit leverages a PATH environment variable manipulation in macOS DirectoryService to escalate privileges to root. It requires DirectoryService to be crashed prior to execution and involves replacing the PATH to execute a malicious 'touch' binary.
Description
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Exploits (1)
This exploit leverages a PATH environment variable manipulation in macOS DirectoryService to escalate privileges to root. It requires DirectoryService to be crashed prior to execution and involves replacing the PATH to execute a malicious 'touch' binary.