PT-2003-1358 · Trublue · Trublueenvironment

Publicado 2003-03-03 · Atualizado 2008-09-11 · CVE-2003-0088

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TruBlueEnvironment for MacOS versions 10.2.3 and earlier

Description The issue allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable used to write debugging information.

Recommendations For TruBlueEnvironment for MacOS versions 10.2.3 and earlier, consider restricting the ability to set environment variables used for debugging information until a patch is available. As a temporary workaround, limit the privileges of users who can set these variables to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2003-0088

Produtos afetados

Trublueenvironment

Referências · 6

• http://atstake.com/research/advisories/2003/a021403-1.txt · Aviso do Fabricante
• http://iss.net/security_center/static/11332.php · Aviso do Fabricante
• http://securityfocus.com/bid/6859 · Nota
• http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0088 · Nota de Segurança
• http://docs.info.apple.com/article.html?artnum=61798 · Nota