CVE-2012-4284

This Metasploit module exploits a privilege escalation vulnerability in Viscosity 1.4.1 on Mac OS X. It leverages insufficient path validation in the setuid ViscosityHelper to execute arbitrary Python code as root, ultimately achieving local privilege escalation.

This exploit leverages a symlink attack against Viscosity's SUID helper to execute arbitrary code as root. It creates a malicious `site.py` file in a crafted directory, then tricks the helper into executing it via a symlink.

This Metasploit module exploits a vulnerability in Viscosity 1.4.1 on Mac OS X, where insufficient validation of path names in the setuid ViscosityHelper allows arbitrary Python code execution as root. It drops a malicious Python script and a payload executable, then leverages a symlink to trigger the exploit.