Confused Deputies strike again: OS X DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability

Tony Arcieri <[email protected]> Wed, 22 Jul 2015 18:05:48 -0700
Newsgroups gmane.comp.capabilities.general
Message-ID <CAHOTMVJ426LVjAGbczvXkhqBnsDN6BgG3e-wvTdoebX5syzjfQ@mail.gmail.com>
I thought this was particularly interesting, because it's basically the
same problem described in Norm's original Confused Deputy paper:

https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html

-- 
Tony Arcieri

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk