PT-2007-1816 · Apple · Activity Monitor.App+4

Publicado 2007-01-18 · Atualizado 2017-10-19 · CVE-2007-0345

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X version 10.4.8

Description: The issue concerns weak permissions in certain programs within Mac OS X, specifically the Activity Monitor.app, Keychain Access.app, and ODBC Administrator.app. These weak permissions allow local admin users to modify the programs and subsequently gain root privileges by performing permissions repair via diskutil.

Recommendations: For Mac OS X version 10.4.8, consider restricting write access to the affected programs to prevent local admin users from modifying them. As a temporary workaround, avoid using the diskutil permissions repair feature until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-0345

Produtos afetados

Activity Monitor.App

Keychain Access.App

Macos X

Odbc Administrator.App

Diskutil

Referências · 7

• 🔥 https://exploit-db.com/exploits/3136 · Exploit
• 🔥 http://projects.info-pull.com/moab/MOAB-15-01-2007.html · Exploit
• http://osvdb.org/32700 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31530 · Nota
• http://osvdb.org/32702 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0345 · Nota de Segurança
• http://osvdb.org/32701 · Nota