Apple Mac OS X Xterm Local Privilege Escalation Vulnerability

Bugtraq ID:	33798
Class:	Design Error
CVE:	CVE-2009-0141
Remote:	No
Local:	Yes
Published:	Feb 13 2009 12:00AM
Updated:	Feb 17 2009 10:38PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X Xterm Local Privilege Escalation Vulnerability

Apple Mac OS X is prone to a local privilege-escalation vulnerability that affects XTerm when run in conjunction with Luit.

Local attackers may exploit this issue to gain elevated privileges; other attacks may also be possible.

This issue affects Mac OS X 10.4.11 and 10.5.6. Other distributions that include XTerm and Luit may also be vulnerable, but this has not been confirmed.

NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Apple Mac OS X Xterm Local Privilege Escalation Vulnerability

An attacker may exploit this issue using commonly available tools.

Apple Mac OS X Xterm Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.


Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_


• Apple SecUpdSrvr2009-001Univ.dmg
  Universal
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_

Apple Mac OS X 10.4.11

• Apple SecUpd2009-001Intel.dmg
  for Intel
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_Int el_


• Apple SecUpd2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_PPC _

Apple Mac OS X 10.5.6

• Apple SecUpd2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Leopard_

Apple Mac OS X Server 10.5.6

• Apple SecUpdSrvr2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_

Apple Mac OS X Xterm Local Privilege Escalation Vulnerability

References:

• About the security content of Security Update 2009-001 (Apple)
  
• Mac OS X Homepage (Apple)