Mac OS X crashdump symbolic links security vulnerability
Published:		29.01.2007
Source:		BUGTRAQ
SecurityVulns ID:		7127
Type:		local
Level:		5/10
Description:		Symbolic links problem on creating dump file in user's home. Allows admin group user to escalate privileges to root.

Affected:		APPLE : Mac OS X 10.4
CVE:		CVE-2007-0467 (crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/.)

Original document

MOAB, MOAB-28-01-2007: Apple crashdump Privilege Escalation Vulnerability (29.01.2007)

Discuss:

Read or add your comments to this news (0 comments)