{"vulnerability": "CVE-2017-13872", "sightings": [{"uuid": "921e6050-f0bc-4034-ab74-272914366105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43248", "content": "", "creation_timestamp": "2017-11-28T00:00:00.000000Z"}, {"uuid": "c7cf1538-6381-413c-8d65-80b3db64f7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43201", "content": "", "creation_timestamp": "2017-11-30T00:00:00.000000Z"}, {"uuid": "94503bd0-51be-4094-a527-188e35ed609f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "e2fde72c-59ca-4410-8517-7e9415c043f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:54.000000Z"}, {"uuid": "c137f01e-1e0a-46c6-9184-5d4444a0c57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vnc/ard_root_pw.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "99d7ff49-4540-4c0e-a0ff-31290b6107db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/root_no_password.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "1792f16a-a1e3-40f7-b6ac-c59ff20d068b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "exploited", "source": "https://t.me/information_security_channel/25462", "content": "RootOS \u2013 macOS Root Helper\nhttps://kalilinuxtutorials.com/rootos-macos-root-helper/\n\nrootOS tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=(ALL) NOPASSWD: ALL\u00a0to\u00a0/etc/sudoers\u00a0allowing any user to run\u00a0sudo\u00a0commands. Also Read \u2013 Goca : Scanner Used To Find Metadata & Hidden Information Exploits CVE-2008-2830 CVE-2015-3760 CVE-2015-5889 CVE-2017-13872 AppleScript Dynamic Phishing Sudo Piggyback Run python root.py Dynamic [\u2026]\nThe post RootOS \u2013 macOS Root Helper (https://kalilinuxtutorials.com/rootos-macos-root-helper/) appeared first on Kali Linux Tutorials (https://kalilinuxtutorials.com/).", "creation_timestamp": "2019-03-13T07:34:18.000000Z"}, {"uuid": "f4dded55-eb13-4a8c-8661-2e5f77f96277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vnc/ard_root_pw.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"jgor\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Enable and set root account to a chosen password on unpatched macOS High Sierra hosts with either Screen Sharing or Remote Management enabled.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/vnc/ard_root_pw\", \"is_install_path\": true, \"mod_time\": \"2025-09-22 19:52:39 +0000\", \"name\": \"Apple Remote Desktop Root Vulnerability\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/vnc/ard_root_pw.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/vnc/ard_root_pw\", \"references\": [\"CVE-2017-13872\", \"URL-https://support.apple.com/en-us/HT208315\", \"ATT&CK-T1021.005\"], \"rport\": 5900, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:12.171925Z"}, {"uuid": "e6d1fce3-a13a-4f9f-a688-dff68f3069f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-13872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/root_no_password.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"chethan177\", \"lemiorhan\", \"timwr\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a serious flaw in MacOSX High Sierra.\\n          Any user can login with user \\\"root\\\", leaving an empty password.\", \"disclosure_date\": \"2017-11-29\", \"fullname\": \"exploit/osx/local/root_no_password\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Mac OS X Root Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/osx/local/root_no_password.rb\", \"platform\": \"OSX\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"osx/local/root_no_password\", \"references\": [\"CVE-2017-13872\", \"URL-https://twitter.com/lemiorhan/status/935578694541770752\", \"URL-https://news.ycombinator.com/item?id=15800676\", \"URL-https://forums.developer.apple.com/thread/79235\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Mac OS X 10.13.1 High Sierra x64 (Native Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:31.508179Z"}]}