PT-2013-4754 · Apple · Macos X+1

Published 2013-06-05 · Updated 2013-06-05 · CVE-2013-3949

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XNU kernel in Apple Mac OS X version 10.8.x

Description The issue allows local users to bypass intended access restrictions. This is due to the posix spawn system call not preventing the use of certain flags for setuid and setgid programs. A wrapper program can exploit this by calling the posix spawnattr setflags function, potentially leading to unauthorized access.

Recommendations For Mac OS X version 10.8.x, consider restricting the use of the posix spawnattr setflags function to minimize the risk of exploitation. Additionally, avoid using the POSIX SPAWN DISABLE ASLR and POSIX SPAWN ALLOW DATA EXEC flags for setuid and setgid programs until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-3949

Affected Products

Macos X

Xnu Kernel

References · 3

• 🔥 http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3949 · Security Note
• http://syscan.org/index.php/sg/program/day/2 · Note