Описание
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2015-5889
- https://support.apple.com/HT205267
- https://www.exploit-db.com/exploits/38371
- https://www.exploit-db.com/exploits/38540
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
- http://packetstormsecurity.com/files/133826/issetugid-rsh-libmalloc-OS-X-Local-Root.html
- http://packetstormsecurity.com/files/134087/Mac-OS-X-10.9.5-10.10.5-rsh-libmalloc-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2015/Oct/5
- http://www.rapid7.com/db/modules/exploit/osx/local/rsh_libmalloc
- http://www.securityfocus.com/bid/76908
- http://www.securitytracker.com/id/1033703
EPSS
Процентиль: 93%
0.11558
Средний
CVE ID
Связанные уязвимости
nvd
больше 10 лет назад
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
fstec
больше 10 лет назад
Уязвимость операционной системы Mac OS X, позволяющая нарушителю получить привилегии корневого пользователя
EPSS
Процентиль: 93%
0.11558
Средний