Description
Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Intego Personal Backup
Default version status: unknown
0 to ≤ 10.9.0affected
References
- https://blog.quarkslab.com/intego_lpe_macos_1.html ↗
- https://www.intego.com/ ↗
- https://www.intego.com/bootable-mac-backups ↗
- https://integosupport.zendesk.com/hc/en-us/articles/40945636077467-Personal-Backup-X9-Release-Notes ↗
- https://www.vulncheck.com/advisories/intego-personal-backup-task-file-privilege-escalation ↗