PT-2011-3183 · Apple · Osascript+2

Publicado 2011-11-15 · Atualizado 2018-10-09 · CVE-2011-1516

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5.x through 10.7.x

Description The issue concerns the kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles, which fail to propagate restrictions to all created processes. This allows remote attackers to access network resources by using a crafted application. For example, an attacker can use osascript to send Apple events to the launchd daemon.

Recommendations For Mac OS X versions 10.5.x through 10.7.x, consider restricting access to the launchd daemon and limiting the use of osascript to send Apple events as a temporary workaround until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-1516

Produtos afetados

Macos X

Launchd

Osascript

Referências · 4

• 🔥 https://exploit-db.com/exploits/18853 · Exploit
• 🔥 http://coresecurity.com/content/apple-osx-sandbox-bypass · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1516 · Nota de Segurança
• http://securityfocus.com/archive/1/520479/100/100/threaded · Nota