PT-2003-1358 · Trublue · Trublueenvironment

Published 2003-03-03 · Updated 2008-09-11 · CVE-2003-0088

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TruBlueEnvironment for MacOS versions 10.2.3 and earlier

Description The issue allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable used to write debugging information.

Recommendations For TruBlueEnvironment for MacOS versions 10.2.3 and earlier, consider restricting the ability to set environment variables used for debugging information until a patch is available. As a temporary workaround, limit the privileges of users who can set these variables to prevent potential exploitation.

Fix

Related Identifiers

CVE-2003-0088

Affected Products

Trublueenvironment

References · 6

• http://atstake.com/research/advisories/2003/a021403-1.txt · Vendor Advisory
• http://iss.net/security_center/static/11332.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0088 · Security Note
• http://securityfocus.com/bid/6859 · Note
• http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt · Note
• http://docs.info.apple.com/article.html?artnum=61798 · Note