PT-2005-2337 · Apple · Macos X

Publicado 2005-05-04 · Atualizado 2008-09-05 · CVE-2005-1335

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X version 10.3.9

Description: A local privilege escalation issue exists due to the insecure use of external helper programs by certain commands. Specifically, the commands chfn, chpass, and chsh are affected. This allows local users to gain elevated privileges.

Recommendations: For Mac OS X version 10.3.9, consider restricting access to the chfn, chpass, and chsh commands until a fix is available. As a temporary workaround, avoid using these commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-1335

Produtos afetados

Macos X

Referências · 4

• http://us-cert.gov/cas/techalerts/TA05-136A.html · Nota
• http://kb.cert.org/vuls/id/331694 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1335 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2005/May/msg00001.html · Aviso do Fabricante