CVE-2012-4284
CRITICALViscosity 1.4.1 - Privilege Escalation via ViscosityHelper Path Validation Issue
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-4284.
PoCs published by Metasploit, zx2c4, Jason A. Donenfeld, juan vazquez, including Metasploit module exploits/osx/local/setuid_viscosity.
AI-analyzed exploit summary This Metasploit module exploits a privilege escalation vulnerability in Viscosity 1.4.1 on Mac OS X. It leverages insufficient path validation in the setuid ViscosityHelper to execute arbitrary Python code as root, ultimately achieving local privilege escalation.
Description
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code
Exploits (3)
This Metasploit module exploits a privilege escalation vulnerability in Viscosity 1.4.1 on Mac OS X. It leverages insufficient path validation in the setuid ViscosityHelper to execute arbitrary Python code as root, ultimately achieving local privilege escalation.
This exploit leverages a symlink attack against Viscosity's SUID helper to execute arbitrary code as root. It creates a malicious `site.py` file in a crafted directory, then tricks the helper into executing it via a symlink.
This Metasploit module exploits a vulnerability in Viscosity 1.4.1 on Mac OS X, where insufficient validation of path names in the setuid ViscosityHelper allows arbitrary Python code execution as root. It drops a malicious Python script and a payload executable, then leverages a symlink to trigger the exploit.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H