CVE-2015-3673

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

5.81% chance of exploitation in the next 30 days, 93rd percentile

Published

2015-07-03

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/rootpipe_entitlements…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38036

Security advisories

• http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
• http://support.apple.com/kb/HT204942
• http://www.securityfocus.com/bid/75493

References

• CVE Record
• NVD entry