CVE-2017-15357 The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.
HighCVSS 7.4
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arqbackup arq | < 5.9.7 | 5.9.7 |
References
- m4.rkw.io exploit third-party-advisory
- www.arqbackup.com release-notes vendor-advisory
- 43218 exploit third-party-advisory vdb-entry