Description
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.rapid7.com/db/modules/exploit/osx/local/rsh_libmalloc ↗
- http://www.securitytracker.com/id/1033703 ↗
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html ↗
- http://seclists.org/fulldisclosure/2015/Oct/5 ↗
- http://packetstormsecurity.com/files/133826/issetugid-rsh-libmalloc-OS-X-Local-Root.html ↗
- https://support.apple.com/HT205267 ↗
- https://www.exploit-db.com/exploits/38540/ ↗
- http://www.securityfocus.com/bid/76908 ↗
- https://www.exploit-db.com/exploits/38371/ ↗
- http://packetstormsecurity.com/files/134087/Mac-OS-X-10.9.5-10.10.5-rsh-libmalloc-Privilege-Escalation.html ↗