Exploitation Summary
EIP tracks 5 public exploits for CVE-2013-1775.
PoCs published by David Kennedy (ReL1K), Metasploit, bekhzod0725, including Metasploit module exploits/osx/local/sudo_password_bypass.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in OSX <= 10.8.4 by manipulating the system time to bypass sudo authentication, then spawns a reverse shell to a specified IP and port.
Description
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
Exploits (5)
This exploit leverages a local privilege escalation vulnerability in OSX <= 10.8.4 by manipulating the system time to bypass sudo authentication, then spawns a reverse shell to a specified IP and port.
This Metasploit module exploits CVE-2013-1775, a sudo vulnerability on Mac OS X, by resetting the system clock to bypass password authentication for users in the admin group. It checks for vulnerable sudo versions and user privileges before executing the exploit.
This Perl script exploits CVE-2013-1775, a local privilege escalation vulnerability in Apple Mac OSX <= 10.8.4. It manipulates the system date to bypass sudo authentication and establishes a reverse shell to a specified IP and port.
This Metasploit module exploits CVE-2013-1775, a sudo password bypass vulnerability on Mac OS X. It manipulates the system clock to 1970-01-01 to bypass sudo authentication for users in the admin group who have previously used sudo.