OS X 10.10.5 kernel local privilege escalation

Re:OS X 10.10.5 kernel local privilege escalation by x0 on Saturday August 15, 2015 @11:04PM (#10067809)

Okay, this is really weird... after rooting, and pressing ^D or typing exit, I stay root

    ~/code/tpwn % id -u
    503
    
    ~/code/tpwn % ./tpwn
    leaked kaslr slide, @ 0x0000000005600000
    sh-3.2# exit
    exit
    
    ~/code/tpwn # id -u
    0

Edit: and it crashes iTerm2 after the last `id -u`. Managed to get a screenshot of what I'm talking about: http://i.imgur.com/foWgTBN.png

[ Parent | on HN ]

Re:OS X 10.10.5 kernel local privilege escalation by jake223 on Saturday August 15, 2015 @11:07PM (#10067816)

This does not happen for me.

  bash-3.2$ ./tpwn
  leaked kaslr slide, @ 0x000000000f800000
  sh-3.2# exit
  bash-3.2$ id -u
  501

[ Parent | on HN ]

Re:OS X 10.10.5 kernel local privilege escalation by benwilber0 on Saturday August 15, 2015 @11:08PM (#10067818)

I replaces your user shell with a root shell. You're not "root" in that terminal.

[ Parent | on HN ]