PT-2011-1295 · Apple · Macos X

Published 2011-11-15 · Updated 2011-11-21 · CVE-2008-7303

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.x

Description The issue in Apple Mac OS X allows remote attackers to access network resources via a crafted application. This is because the nonet and nointernet sandbox profiles do not propagate restrictions to all created processes. A demonstration of this issue involves using launchctl to trigger the launchd daemon's execution of a script file.

Recommendations For Apple Mac OS X versions 10.5.x, consider restricting access to the launchd daemon and limiting the execution of script files until a fix is available. As a temporary workaround, avoid using the nonet and nointernet sandbox profiles to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-7303

Affected Products

Macos X

References · 3

• 🔥 http://coresecurity.com/content/apple-osx-sandbox-bypass · Exploit
• 🔥 https://blackhat.com/presentations/bh-jp-08/bh-jp-08-Miller/BlackHat-Japan-08-Miller-Hacking-OSX.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7303 · Security Note