packetstormsecurity.com
http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html CVE-2018-18859
HIGH
LiquidVPN 1.36 / 1.37 - Privilege Escalation
Record summary
CVE-2018-18859 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the value of the "tun_path" or "tap_path" pathname in a kextload() call.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBLiquidVPN 1.36 / 1.37 - Privilege EscalationExploitDB exploitby Bernd LeitnerNot analyzed1 file
References
420181102 Multiple Privilege Escalation Vulnerabilities in LiquidVPN for MacOS (CVE-2018-18856, CVE-2018-18857, CVE-2018-18858, CVE-2018-18859)mailing list
http://seclists.org/fulldisclosure/2018/Nov/1 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-18859 45782exploit
https://www.exploit-db.com/exploits/45782