Privilege Escalation via Environment Variables in Apple OS X Remote Commands Component

Privilege Escalation via Environment Variables in Apple OS X Remote Commands Component

CVE-2015-5889 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.

Learn more about our User Device Pen Test.