Description
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a macOS High Sierra
macOS High Sierraaffected
References
- https://objective-see.com/blog/blog_0x24.html ↗
- https://support.apple.com/HT208331 ↗
- https://support.apple.com/HT208315 ↗
- https://arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/ ↗
- http://www.securitytracker.com/id/1039875 ↗
- https://www.exploit-db.com/exploits/43201/ ↗
- https://github.com/rapid7/metasploit-framework/pull/9302 ↗
- https://www.exploit-db.com/exploits/43248/ ↗
- http://www.securityfocus.com/bid/101981 ↗
- https://www.wired.com/story/macos-update-undoes-apple-root-bug-patch/ ↗