CVE-2015-5889

This Metasploit module exploits CVE-2015-5889 to escalate privileges on Mac OS X 10.9.5 to 10.10.5 by manipulating the sudoers file via rsh and malloc log files. It writes a cron job to modify sudoers, allowing passwordless sudo access.

This exploit leverages a vulnerability in OS X's issetugid() function combined with rsh and libmalloc to achieve local privilege escalation. It manipulates environment variables to inject a cron job that modifies /etc/sudoers, granting passwordless sudo access.

This Metasploit module exploits a privilege escalation vulnerability in Mac OS X 10.9.5 to 10.10.5 by manipulating the rsh and malloc log files to write to the sudoers file, allowing passwordless sudo access.