| Package | Affected versions | Patched versions |
|---|---|---|
| kismac | = 0.05d |
KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar techniques" using exchangeKernel.sh.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free