Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-0467. PoCs published by MoAB.
AI-analyzed exploit summary This exploit leverages a symlink attack in macOS CrashReporter to overwrite the root crontab, achieving local privilege escalation. It manipulates the __LINKEDIT segment of a binary to influence crash log output and create a malicious crontab entry.
Description
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/.
Exploits (1)
This exploit leverages a symlink attack in macOS CrashReporter to overwrite the root crontab, achieving local privilege escalation. It manipulates the __LINKEDIT segment of a binary to influence crash log output and create a malicious crontab entry.