CVE-2025-57489
HIGHSuperDuper! - Privilege Escalation via SDAgent setuid Binary
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-57489. PoCs published by graypixel2121.
AI-analyzed exploit summary This PoC exploits a privilege escalation vulnerability in SuperDuper! v3.10 by leveraging the setuid SDAgent component, which improperly handles shell commands without verifying the requesting application. The exploit uses a named pipe to inject arbitrary commands, achieving root execution.
Description
Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary.
Exploits (1)
This PoC exploits a privilege escalation vulnerability in SuperDuper! v3.10 by leveraging the setuid SDAgent component, which improperly handles shell commands without verifying the requesting application. The exploit uses a named pipe to inject arbitrary commands, achieving root execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H