PT-2018-18611 · Keepsolid · Vpn Unlimited

Benjamin Watson + 1 · Publicado 2018-03-16 · Atualizado 2019-10-03 · CVE-2018-8739

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VPN Unlimited version 4.2.0 for macOS

Description The issue concerns a root privilege escalation in the privileged helper tool of VPN Unlimited. This tool implements an XPC interface, allowing arbitrary applications to execute system commands as root.

Recommendations For VPN Unlimited version 4.2.0, consider disabling the XPC interface in the privileged helper tool until a patch is available to prevent arbitrary system command execution as root.

Correção

Identificadores relacionados

CVE-2018-8739

Produtos afetados

Vpn Unlimited

Referências · 3

• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-014.md · Nota
• https://osv.dev/vulnerability/CVE-2018-8739 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8739 · Nota de Segurança