PT-2007-2188 · Apple · Macos X

Published 2007-04-24 · Updated 2011-03-08 · CVE-2007-0737

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.9

Description The issue concerns the Login Window in Apple Mac OS X, where it fails to properly check certain environment variables. This allows local users to gain privileges through unspecified vectors.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.9, update to a version that properly checks environment variables to prevent privilege escalation.

Fix

Related Identifiers

CVE-2007-0737

Affected Products

Macos X

References · 9

• http://securityfocus.com/bid/23569 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-0737 · Security Note
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Vendor Advisory
• http://securitytracker.com/id?1017939 · Note
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Note
• http://secunia.com/advisories/24966 · Note
• http://vupen.com/english/advisories/2007/1470 · Note
• http://docs.info.apple.com/article.html?artnum=305391 · Note
• http://osvdb.org/34862 · Note