CVE-2017-16928 The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/bla...
HighCVSS 7.8
EPSS 0.99%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haystacksoftware arq | <= 5.10 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- m4.rkw.io third-party-advisory
- 43925 exploit third-party-advisory vdb-entry