PT-2013-4754 · Apple · Macos X+1

Publicado 2013-06-05 · Atualizado 2013-06-05 · CVE-2013-3949

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XNU kernel in Apple Mac OS X version 10.8.x

Description The issue allows local users to bypass intended access restrictions. This is due to the posix spawn system call not preventing the use of certain flags for setuid and setgid programs. A wrapper program can exploit this by calling the posix spawnattr setflags function, potentially leading to unauthorized access.

Recommendations For Mac OS X version 10.8.x, consider restricting the use of the posix spawnattr setflags function to minimize the risk of exploitation. Additionally, avoid using the POSIX SPAWN DISABLE ASLR and POSIX SPAWN ALLOW DATA EXEC flags for setuid and setgid programs until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3949

Produtos afetados

Macos X

Xnu Kernel

Referências · 3

• 🔥 http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf · Exploit
• http://syscan.org/index.php/sg/program/day/2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3949 · Nota de Segurança