CVEs-PoC/2015/CVE-2015-3673.md

CVE-2015-3673

Description

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.

POC

Reference

• https://www.exploit-db.com/exploits/38036/
• https://www.exploit-db.com/exploits/38036/

Github

• https://github.com/sideeffect42/RootPipeTester