Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Haystack Arq for Mac 安全漏洞
Vulnerability Description
Haystack Arq for Mac是美国Haystack Software公司的一款基于Mac平台的文件备份软件。auto-updater是其中的一个自动升级组件。 基于Mac平台的Haystack Arq 5.9.7之前的版本中的auto-updater的‘setpermissions’函数存在安全漏洞。本地攻击者可通过对updater二进制文件实施符号链接攻击利用该漏洞获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A