PT-2017-1761 · Apple · Apple Macos

Patrick Wardle · Publicado 2017-04-02 · Atualizado 2019-10-03 · CVE-2017-2381

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4

Description The issue involves the sudo component and allows remote authenticated users to gain privileges by leveraging membership in the admin group on a network directory server. It is related to incorrect permission handling.

Recommendations For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue. As a temporary workaround, consider restricting membership in the admin group on the network directory server to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-275

Identificadores relacionados

BDU:2017-00917

CVE-2017-2381

Produtos afetados

Apple Macos

Referências · 6

• https://bdu.fstec.ru/vul/2017-00917 · Nota de Segurança
• http://securitytracker.com/id/1038138 · Nota
• https://support.apple.com/HT207615 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2381 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2381 · Nota de Segurança
• http://securityfocus.com/bid/97140 · Nota