Apple Mac OS X 'mach_port_space_info()' Function Local Information Disclosure Vulnerability

Bugtraq ID:	60441
Class:	Design Error
CVE:	CVE-2013-3953
Remote:	No
Local:	Yes
Published:	Apr 26 2013 12:00AM
Updated:	Mar 19 2015 09:31AM
Credit:	Stefan Esser
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple Apple TV 5.0
Not Vulnerable:

Apple Mac OS X 'mach_port_space_info()' Function Local Information Disclosure Vulnerability

Apple Mac OS X is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

Apple Mac OS X 'mach_port_space_info()' Function Local Information Disclosure Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Apple Mac OS X 'mach_port_space_info()' Function Local Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X 'mach_port_space_info()' Function Local Information Disclosure Vulnerability

References:

• Apple Homepage (Apple)