2 comments

[ 4.1 ms ] story [ 12.2 ms ] thread
Maybe the title should be "VMWare Fusion (for Mac OSX) local privilege escalation." Since, unlike Linux, the ways to exploit it on OS X seem significantly more limited.
I think it works with any setuid binary (which VMWare Fusion is) that also calls bash internally.