Exploitation Summary
EIP tracks 3 public exploits for CVE-2015-5889.
PoCs published by Metasploit, rebel, rebel, shandelman116, including Metasploit module exploits/osx/local/rsh_libmalloc.
AI-analyzed exploit summary This Metasploit module exploits CVE-2015-5889 to escalate privileges on Mac OS X 10.9.5 to 10.10.5 by manipulating the sudoers file via rsh and malloc log files. It writes a cron job to modify sudoers, allowing passwordless sudo access.
Description
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
Exploits (3)
This Metasploit module exploits CVE-2015-5889 to escalate privileges on Mac OS X 10.9.5 to 10.10.5 by manipulating the sudoers file via rsh and malloc log files. It writes a cron job to modify sudoers, allowing passwordless sudo access.
This exploit leverages a vulnerability in OS X's issetugid() function combined with rsh and libmalloc to achieve local privilege escalation. It manipulates environment variables to inject a cron job that modifies /etc/sudoers, granting passwordless sudo access.
This Metasploit module exploits a privilege escalation vulnerability in Mac OS X 10.9.5 to 10.10.5 by manipulating the rsh and malloc log files to write to the sudoers file, allowing passwordless sudo access.