Apple Mac OS X Untrusted Java Applet Privilege Escalation Vulnerability
BID:14826
Info
Apple Mac OS X Untrusted Java Applet Privilege Escalation Vulnerability
| Bugtraq ID: | 14826 |
| Class: | Design Error |
| CVE: |
CVE-2005-2530 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 13 2005 12:00AM |
| Updated: | Jul 12 2009 05:06PM |
| Credit: | This issue was reported by the vendor. |
| Vulnerable: |
Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 |
| Not Vulnerable: |
Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 |
Discussion
Apple Mac OS X Untrusted Java Applet Privilege Escalation Vulnerability
Apple Mac OS X is prone to a vulnerability that can allow an untrusted Java applet to gain elevated privileges.
It is conjectured that this could allow the applet to access resources with the privilege level of the user running the applet, potentially allowing the applet to read, write, or execute files on the system that are accessible to the user.
It should be noted that this issue is only specific to Java running on Mac OS X 10.3.9 and prior.
Apple Mac OS X is prone to a vulnerability that can allow an untrusted Java applet to gain elevated privileges.
It is conjectured that this could allow the applet to access resources with the privilege level of the user running the applet, potentially allowing the applet to read, write, or execute files on the system that are accessible to the user.
It should be noted that this issue is only specific to Java running on Mac OS X 10.3.9 and prior.
Exploit / POC
Apple Mac OS X Untrusted Java Applet Privilege Escalation Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apple Mac OS X Untrusted Java Applet Privilege Escalation Vulnerability
Solution:
Apple has released an update to address this issue in Mac OS X v10.3.9.
Apple Mac OS X 10.3.9
Apple Mac OS X Server 10.3.9
Solution:
Apple has released an update to address this issue in Mac OS X v10.3.9.
Apple Mac OS X 10.3.9
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
Apple Mac OS X Server 10.3.9
-
Apple JavaSecurityUpdate4.dmg
http://www.apple.com/support/downloads/javasecurityupdate.html
References
Apple Mac OS X Untrusted Java Applet Privilege Escalation Vulnerability
References:
References:
- Vendor Home Page (Apple)