cve/2017/CVE-2017-16945.md

### [CVE-2017-16945](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16945)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path.

### POC

#### Reference
- http://packetstormsecurity.com/files/146159/Arq-5.10-Local-Privilege-Escalation.html
- https://m4.rkw.io/blog/two-local-root-privesc-bugs-in-arq-backup--510.html
- https://www.exploit-db.com/exploits/43926/

#### Github
No PoCs found on GitHub currently.