Description
A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MacPorts | MacPorts | < 2.10.5 | — |
Medium · 6.9
CVE-2024-11681
EUVD-2024-34044
Remote Code Execution in MacPorts
Published Jan 7, 2025 · Updated Jan 7, 2025 · Assigned by Google