๐ OS X / iOS Suid Binary Logic Error Code Execution
๐ก Newskategorie: PoC
๐ Quelle: packetstormsecurity.com
The code responsible for loading a suid-binary following a call to the execve syscall invalidates the task port after first swapping the new vm_map into the old task object leaving a short race window where we can manipulate the memory of the euid(0) process before the old task port is destroyed. ...