CVE-2015-3673
Apple OS X Entitlements Rootpipe Privilege Escalation
Title source: metasploitExploitation Summary
EIP tracks 2 public exploits for CVE-2015-3673.
PoCs published by Metasploit, Emil Kvarnhammar, joev, including Metasploit module exploits/osx/local/rootpipe_entitlements.
AI-analyzed exploit summary This Metasploit module exploits CVE-2015-3673 (Rootpipe) to achieve local privilege escalation on OS X by injecting code into a process with the 'admin.writeconfig' entitlement. It copies and modifies the Directory Utility.app to execute a malicious payload with root privileges.
Description
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
Exploits (2)
This Metasploit module exploits CVE-2015-3673 (Rootpipe) to achieve local privilege escalation on OS X by injecting code into a process with the 'admin.writeconfig' entitlement. It copies and modifies the Directory Utility.app to execute a malicious payload with root privileges.
This Metasploit module exploits CVE-2015-3673, a privilege escalation vulnerability in Apple OS X (10.9-10.10.3), by injecting code into a process with the 'admin.writeconfig' entitlement. It copies and modifies the Directory Utility.app to execute a malicious payload, achieving root privileges.