CVE-2017-2675 Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obd...
HighCVSS 7.8
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| obdev little snitch | = 3.0 | No fix listed |
| obdev little snitch | = 3.0.1 | No fix listed |
| obdev little snitch | = 3.0.2 | No fix listed |
| obdev little snitch | = 3.0.3 | No fix listed |
| obdev little snitch | = 3.0.4 | No fix listed |
| obdev little snitch | = 3.1 | No fix listed |
| obdev little snitch | = 3.1.1 | No fix listed |
| obdev little snitch | = 3.3 | No fix listed |
| obdev little snitch | = 3.3.1 | No fix listed |
| obdev little snitch | = 3.3.2 | No fix listed |
| obdev little snitch | = 3.3.3 | No fix listed |
| obdev little snitch | = 3.3.4 | No fix listed |
| obdev little snitch | = 3.4 | No fix listed |
| obdev little snitch | = 3.4.1 | No fix listed |
| obdev little snitch | = 3.4.2 | No fix listed |
| obdev little snitch | = 3.5 | No fix listed |
| obdev little snitch | = 3.5.1 | No fix listed |
| obdev little snitch | = 3.5.2 | No fix listed |
| obdev little snitch | = 3.5.3 | No fix listed |
| obdev little snitch | = 3.6 | No fix listed |
| obdev little snitch | = 3.6.1 | No fix listed |
| objective development little snitch | = 3.6.2 | No fix listed |
| objective development little snitch | = 3.6.3 | No fix listed |
| objective development little snitch | = 3.6.4 | No fix listed |
| objective development little snitch | = 3.7 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| objective development little snitch | = 3.7.1 | No fix listed |
| objective development little snitch | = 3.7.2 | No fix listed |
| objective development little snitch | = 3.7.3 | No fix listed |
| Objective Development Software GmbH Little Snitch | = 3.0 - 3.7.3 | No fix listed |