2013
03.05

Viscosity setuid-set ViscosityHelper Privilege Escalation

Category: Apple, exploit, facebook, iphone, m$, OSX security tools, Privacy, Security, tools, twitter, XSS / Tag: , , ,  / Add Comment

This Metasploit module exploits a vulnerability in Viscosity 1.4.1 on Mac OS X. The vulnerability exists in the setuid ViscosityHelper, where an insufficient validation of path names allows execution of arbitrary python code as root. This Metasploit module has been tested successfully on Viscosity 1.4.1 over Mac OS X 10.7.5.

More:
Viscosity setuid-set ViscosityHelper Privilege Escalation

No Comment.

Add Your Comment

Your Comment

You must be logged in to post a comment.