OSX Local Root Privilege Escalation Exploit

This report documents a local privilege escalation vulnerability in OS X versions up to 10.8.4 that abuses Date & Time handling and sudo to gain root. It provides references to a Metasploit module and includes a Python proof-of-concept that spawns a root reverse shell to an attacker-controlled listener, enabling local attackers to obtain privileged remote shells.