CVE-2015-3673
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of...
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
Exploit likelihood
What each source reports
NVD Score used
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
- Record
CVE-2015-3673- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
- Record
CVE-2015-3673- Updated
- 2026-11-02
EUVDEUVD-2015-3709 No score
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
- Record
EUVD-2015-3709- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2h38-rw9c-6j5p No score
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of...
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
- Record
GHSA-2h38-rw9c-6j5p- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apple Mac OSX Entitlements - 'Rootpipe' Local Privilege Escalation (Metasploit) | 2015-08-31 |
| Metasploit | Apple OS X Entitlements Rootpipe Privilege Escalation | 2015-07-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3673 is a high vulnerability (CVSS 7.2) in Apple Mac Os X, published July 3, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.81%, the 93rd percentile. No source names a fixed version.