RSS   Vulnerabilities for 'Little snitch'   RSS

2020-06-30
 
CVE-2020-13095

CWE-59
 

 
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.

 
2019-08-23
 
CVE-2019-13014

CWE-264
 

 
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.

 
 
CVE-2019-13013

CWE-264
 

 
Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root.

 


Copyright 2024, cxsecurity.com

 

Back to Top