Showing 1 - 2 of 2

Files from Jason A. Donenfeld

Viscosity setuid-set ViscosityHelper Privilege Escalation: Posted Mar 5, 2013; Authored by juan vazquez, Jason A. Donenfeld | Site metasploit.com; This Metasploit module exploits a vulnerability in Viscosity 1.4.1 on Mac OS X. The vulnerability exists in the setuid ViscosityHelper, where an insufficient validation of path names allows execution of arbitrary python code as root. This Metasploit module has been tested successfully on Viscosity 1.4.1 over Mac OS X 10.7.5.; tags | exploit, arbitrary, root, python; systems | apple, osx; advisories | CVE-2012-4284, OSVDB-84709; SHA-256 | 6327eb13b7e692d86e8bb599155a99f74615d2b9fede67b7da69c91955b632d0; Download | Favorite | View

Setuid Tunnelblick Privilege Escalation: Posted Mar 5, 2013; Authored by juan vazquez, Jason A. Donenfeld | Site metasploit.com; This Metasploit module exploits a vulnerability in Tunnelblick 3.2.8 on Mac OS X. The vulnerability exists in the setuid openvpnstart, where an insufficient validation of path names allows execution of arbitrary shell scripts as root. This Metasploit module has been tested successfully on Tunnelblick 3.2.8 build 2891.3099 over Mac OS X 10.7.5.; tags | exploit, arbitrary, shell, root; systems | apple, osx; advisories | CVE-2012-3485; SHA-256 | 507856bf61b21ad51655751579b11e6da1882fa1c03d6e1c87ca1f635ed4b4ad; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days