Apple Mac OS X Local 'login' Privilege Escalation Vulnerability

Bugtraq ID:	34941
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 12 2009 12:00AM
Updated:	May 13 2009 08:46PM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:	Apple Mac OS X Server 10.5.7 Apple Mac OS X 10.5.7

Apple Mac OS X Local 'login' Privilege Escalation Vulnerability

Apple Mac OS X is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to gain elevated privileges, which may aid in further attacks.

NOTE: This issue was previously covered in BID 34926 (Apple Mac OS X 2009-002 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Apple Mac OS X Local 'login' Privilege Escalation Vulnerability

An attacker requires local interactive access to exploit this issue.

Apple Mac OS X Local 'login' Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.


Apple Mac OS X Server 10.5

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.4.11

• Apple SecUpd2009-002Intel.dmg
  (Intel)
  http://support.apple.com/downloads/DL817/SecUpd2009-002Intel.dmg


• Apple SecUpdSrvr2009-002PPC.dmg
  (PowerPC)
  http://support.apple.com/downloads/DL819/SecUpdSrvr2009-002PPC.dmg


• Apple SecUpdSrvr2009-002Univ.dmg
  (Universal)
  http://support.apple.com/downloads/DL816/SecUpdSrvr2009-002Univ.dmg

Apple Mac OS X 10.4.11

• Apple SecUpd2009-002PPC.dmg
  (PowerPC)
  http://support.apple.com/downloads/DL818/SecUpd2009-002PPC.dmg

Apple Mac OS X 10.5.1

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.1

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.2

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.2

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.3

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.3

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.4

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.4

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X Server 10.5.5

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.5

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X 10.5.6

• Apple MacOSXUpd10.5.7.dmg
  http://support.apple.com/downloads/DL826/MacOSXUpd10.5.7.dmg

Apple Mac OS X Server 10.5.6

• Apple MacOSXServerUpd10.5.7.dmg
  http://support.apple.com/downloads/DL828/MacOSXServerUpd10.5.7.dmg

Apple Mac OS X Local 'login' Privilege Escalation Vulnerability

References:

• Mac OS X Homepage (Apple)