Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities

Bugtraq ID:	15252
Class:	Unknown
CVE:	CVE-2005-2749 CVE-2005-2750 CVE-2005-2751 CVE-2005-2739 CVE-2005-1126 CVE-2005-1406 CVE-2005-2752
Remote:	No
Local:	Yes
Published:	Oct 31 2005 12:00AM
Updated:	Oct 31 2005 12:00AM
Credit:	Eric Hall of DarkArt Consulting Services reported issue CVE-2005-2739 to the vendor. Ilja van Sprundel and Neil Archibald of Suresec LTD, and Colin Percival of the FreeBSD team reported issues CVE-2005-1126, CVE-2005-1406, CVE-2005-2752 to the vendor. The
Vulnerable:	Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 3 Apple Mac OS X 10.0
Not Vulnerable:	Apple Mac OS X Server 10.4.3 Apple Mac OS X 10.4.3

Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities

Apple has released Security Update 2005-10-31 to address multiple Mac OS X local vulnerabilities.

The following vulnerabilities were addressed by the security update:

- A misleading file ownership display, resulting in a false sense of security.

- A software update failure, potentially resulting in a failure to install critical security fixes.

- A group membership alteration issue, potentially resulting in unauthorized access due to a delayed changes to group membership.

- An information disclosure issue with Keychain, potentially allowing unauthorized users to view already displayed plaintext passwords after the Keychain has automatically locked due to a timeout.

- Multiple information disclosure issues in the kernel, potentially allowing local users to gain access to sensitive information, aiding them in further attacks.

These vulnerabilities will be separated into individual BIDs upon further analysis of the issues.

Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities

Solution:
Apple has released advisory APPLE-SA-2005-10-31 and Mac OS X version 10.4.3 to address these issues. Users are encouraged to utilize the 'Software Update' utility to obtain fixes.

Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities

References:

• About the Mac OS X 10.4.3 Update (Delta) (Apple)
  
• Apple Security Updates (Apple)
  
• Mac OS X Homepage (Apple)
  
• Security Updates (Apple)
  
• Suresec Security Advisory - #00008 (Suresec)
  
• Vendor Home Page (Apple)