CVE-2006-1470
Apple Mac OS X 10.4-10.4.6 - Denial of Service via Invalid LDAP Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1470. PoCs published by Mu Security research.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in Mac OS X's launchd to achieve local privilege escalation by overwriting memory addresses and executing arbitrary shellcode. It creates a malicious .plist file that, when loaded via launchctl, triggers the vulnerability.
Description
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.
Exploits (1)
This exploit leverages a format string vulnerability in Mac OS X's launchd to achieve local privilege escalation by overwriting memory addresses and executing arbitrary shellcode. It creates a malicious .plist file that, when loaded via launchctl, triggers the vulnerability.