PT-2007-1602 · Apple · Diskutil+2

Publicado 2007-01-09 · Atualizado 2011-03-08 · CVE-2007-0117

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DiskManagementTool in DiskManagement.framework version 92.29

Description The issue arises from the improper validation of Bill of Materials (BOM) files by the DiskManagementTool. This allows attackers to gain privileges through a BOM file located under /Library/Receipts/, which can trigger arbitrary file permission changes when a diskutil permission repair operation is executed.

Recommendations For DiskManagementTool in DiskManagement.framework version 92.29, consider restricting access to the /Library/Receipts/ directory to minimize the risk of exploitation until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2007-0117

Produtos afetados

Diskmanagement.Framework

Diskmanagementtool

Diskutil

Referências · 8

• 🔥 http://projects.info-pull.com/moab/MOAB-05-01-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3088 · Exploit
• 🔥 https://exploit-db.com/exploits/3087 · Exploit
• http://vupen.com/english/advisories/2007/0074 · Nota
• http://osvdb.org/31167 · Nota
• http://securityfocus.com/bid/21899 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0117 · Nota de Segurança
• http://secunia.com/advisories/23653 · Nota