Apple Mac OS X Unspecified Local Vulnerability

Bugtraq ID:	16967
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Mar 06 2006 12:00AM
Updated:	Mar 06 2006 10:41PM
Credit:	Discovered by gwerdna.
Vulnerable:	Cosmicperl Directory Pro 10.0.3 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0
Not Vulnerable:

Apple Mac OS X Unspecified Local Vulnerability




Apple Mac OS X is reportedly prone to an unspecified local vulnerability.

A successful attack may allow a local attacker to gain elevated privileges on a vulnerable computer.

All versions of Mac OS X are considered to be vulnerable.

Due to a lack of information, further details cannot be provided at the moment. This BID will be updated when more information becomes available.

This issue was originally considered to be a remotely exploitable vulnerability, however, new information suggests that this issue may only be exploited by a local attacker.

Apple Mac OS X Unspecified Local Vulnerability


The researcher responsible for discovering this issue has reported that an exploit exists to trigger this vulnerability and gain superuser privileges. This exploit is not publicly available.

Apple Mac OS X Unspecified Local Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Apple Mac OS X Unspecified Local Vulnerability

References:

• Mac OS X hacked under 30 minutes (ZDNet)
  
• Mac OS X hacker gains control in 30 min (macnn)
  
• Vendor Home Page (Apple)