Apple Mac OS X Network Authorization Local Privilege Escalation Vulnerability

Bugtraq ID:	40901
Class:	Design Error
CVE:	CVE-2010-1375
Remote:	No
Local:	Yes
Published:	Jun 15 2010 12:00AM
Updated:	Jun 15 2010 12:00AM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X Network Authorization Local Privilege Escalation Vulnerability

Apple Mac OS X is prone to a local privilege-escalation vulnerability affecting the Network Authorization application.

Successful exploits can allow attackers to execute arbitrary code with superuser privileges, resulting in the complete compromise of the affected computer.

NOTE: This issue was previously covered in BID 40871 (Apple Mac OS X Prior to 10.6.4 Multiple Security Vulnerabilities), but has been given its own record to better document it.

Apple Mac OS X Network Authorization Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X Network Authorization Local Privilege Escalation Vulnerability

Solution:
Updates are available; please see the references for details.


Apple Mac OS X Server 10.5.8

• Apple SecUpdSrvr2010-004.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.8

• Apple SecUpd2010-004.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Network Authorization Local Privilege Escalation Vulnerability

References:

• Mac OS X Homepage (Apple)