+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: MacOS (https://hackforums.net/forumdisplay.php?fid=159)
+---- Thread: New root exploit for Yosemite: Rootpipe (/showthread.php?tid=4794857)
New root exploit for Yosemite: Rootpipe - PeregrineX - Apr 25, 2015
I'm surprised nobody's started a discussion on this.
Exploit-DB: Google it. Can't post links yet.
For all you Mac nerds: there is a new local root exploit, codenamed "rootpipe." It is for Yosemite, although the author states it should work for earlier versions. It exploits the system by abusing a hidden admin API framework call.
It already has a CVE: 2015-1130. Apple has tried to patch this in Yosemite recently, however, it flopped.
So, don't download ANY suspicious apps, especially new ones, until they really patch this. If you intend to use this exploit for your own nefarious purposes, go ahead.
Any thoughts? Will you be using this? Discuss below. 🎉🎉🎉
* - w34k - Apr 28, 2015
I believe it was patched with the latest update of OS X 10.10.3
https://support.apple.com/en-us/HT204659
PoC of the exploit here.
https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x
I think it's funny how it's been around for that long. Makes you wonder what else is just waiting to be found.
* - Statesman - Apr 29, 2015
(Apr 25, 2015 06:02 PM)PeregrineX Wrote: I'm surprised nobody's started a discussion on this.
Exploit-DB: Google it. Can't post links yet.
For all you Mac nerds: there is a new local root exploit, codenamed "rootpipe." It is for Yosemite, although the author states it should work for earlier versions. It exploits the system by abusing a hidden admin API framework call.
It already has a CVE: 2015-1130. Apple has tried to patch this in Yosemite recently, however, it flopped.
So, don't download ANY suspicious apps, especially new ones, until they really patch this. If you intend to use this exploit for your own nefarious purposes, go ahead.
Any thoughts? Will you be using this? Discuss below. 🎉🎉🎉
You don't know this was patched successfully last update ?? 🤗