PT-2007-2188 · Apple · Macos X

Publicado 2007-04-24 · Atualizado 2011-03-08 · CVE-2007-0737

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description The issue concerns the Login Window in Apple Mac OS X, where it fails to properly check certain environment variables. This allows local users to gain privileges through unspecified vectors.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, update to a version that properly checks environment variables to prevent privilege escalation.

Correção

Identificadores relacionados

CVE-2007-0737

Produtos afetados

Macos X

Referências · 9

• http://securitytracker.com/id?1017939 · Nota
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Nota
• http://securityfocus.com/bid/23569 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-0737 · Nota de Segurança
• http://secunia.com/advisories/24966 · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• http://docs.info.apple.com/article.html?artnum=305391 · Nota
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Aviso do Fabricante
• http://osvdb.org/34862 · Nota