Apple OS X Privilege Escalation Vulnerability in Admin Framework via XPC Implementation

A vulnerability in the XPC implementation of the Admin Framework in Apple OS X versions prior to 10.10.3 allows local users to bypass authentication and gain administrative privileges. This issue arises from inadequate entitlement checking in the XPC implementation, which can be exploited through unspecified vectors.

Impact

Exploitation of this vulnerability allows local users to gain admin privileges on the affected system.

Reproduction

The vulnerability can be reproduced by using a proof-of-concept exploit that leverages the XPC implementation in the Admin Framework. This exploit must be executed on a vulnerable version of OS X, specifically versions 10.10.1 and 10.10.2. The exploit bypasses authentication and grants administrative privileges.

Remediation

Users can upgrade to OS X Yosemite v10.10.3 to address this vulnerability.