CVE-2017-15357

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.

Metrics

CVSS 3.0 7.4/10CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59 CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://m4.rkw.io/blog/cve201715357-local-root-privesc-in-arq-backup--596.htmlExploit, Third Party Advisory
https://www.arqbackup.com/download/arq5_release_notes.htmlRelease Notes, Vendor Advisory
https://www.exploit-db.com/exploits/43218/Exploit, Third Party Advisory, VDB Entry
https://m4.rkw.io/blog/cve201715357-local-root-privesc-in-arq-backup--596.htmlExploit, Third Party Advisory
https://www.arqbackup.com/download/arq5_release_notes.htmlRelease Notes, Vendor Advisory
https://www.exploit-db.com/exploits/43218/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Dec 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-153587.0Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors inv CVE-2017-153596.5In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/a CVE-2017-15365.4IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allow CVE-2017-153605.4PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect erro CVE-2017-153615.9The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, befor CVE-2017-153626.1osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, CVE-2017-153637.5Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler exten CVE-2017-153645.5The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or CVE-2017-153658.8sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x bef CVE-2017-153669.8Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a single password. This pa CVE-2017-153679.8Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database CVE-2017-153687.8The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer