Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Haystack Arq for Mac 安全漏洞
Vulnerability Description
Haystack Arq for Mac是美国Haystack Software公司的一款基于Mac平台的文件备份软件。auto_updater binary是其中的一个自动升级组件。 基于Mac平台的Haystack Arq 5.10及之前版本中的arq_updater binary存在安全漏洞。本地攻击者可借助特制的更新URL利用该漏洞写入任意文件,获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A