CVE-2007-5863

Related Files

Apple OS X Software Update Command Execution

Posted Dec 31, 2009

Authored by Moritz Jodeit | Site metasploit.com

This Metasploit module exploits a feature in the Distribution Packages, which are used in the Apple Software Update mechanism. This feature allows for arbitrary command execution through JavaScript. This exploit provides the malicious update server. Requests must be redirected to this server by other means for this exploit to work.

tags | exploit, arbitrary, javascript

systems | apple

advisories | CVE-2007-5863

SHA-256 | 31bbe100ffdd2f91eaedeff7614f1752ef8f6fb3e51341837b95b2b328745b19

Download | Favorite | View

appleupdate-exec.txt

Posted Dec 18, 2007

Authored by Moritz Jodeit

Apple Mac OS X Software Update suffers from a remote command execution vulnerability. Full Metasploit module included.

tags | exploit, remote

systems | apple, osx

advisories | CVE-2007-5863

SHA-256 | 1852939fa989f4ddf6144fb1874a746c14013a7706681e093ad78115be9ffd22

Download | Favorite | View