PT-2007-1816 · Apple · Activity Monitor.App+4

Published 2007-01-18 · Updated 2017-10-19 · CVE-2007-0345

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X version 10.4.8

Description: The issue concerns weak permissions in certain programs within Mac OS X, specifically the Activity Monitor.app, Keychain Access.app, and ODBC Administrator.app. These weak permissions allow local admin users to modify the programs and subsequently gain root privileges by performing permissions repair via diskutil.

Recommendations: For Mac OS X version 10.4.8, consider restricting write access to the affected programs to prevent local admin users from modifying them. As a temporary workaround, avoid using the diskutil permissions repair feature until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2007-0345

Affected Products

Activity Monitor.App

Keychain Access.App

Macos X

Odbc Administrator.App

Diskutil

References · 7

• 🔥 https://exploit-db.com/exploits/3136 · Exploit
• 🔥 http://projects.info-pull.com/moab/MOAB-15-01-2007.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0345 · Security Note
• http://osvdb.org/32700 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31530 · Note
• http://osvdb.org/32702 · Note
• http://osvdb.org/32701 · Note