Apple Mac OS X CVE-2013-5191 Local Information Disclosure Vulnerability

Bugtraq ID:	63344
Class:	Design Error
CVE:	CVE-2013-5191
Remote:	No
Local:	Yes
Published:	Oct 22 2013 12:00AM
Updated:	Oct 22 2013 12:00AM
Credit:	Sven-S. Porst
Vulnerable:	Apple Mac OS X 10.8.5 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.8.3 Apple Mac OS X 10.8
Not Vulnerable:	Apple Mac OS X 10.9

Apple Mac OS X CVE-2013-5191 Local Information Disclosure Vulnerability

Apple Mac OS X is prone to local information-disclosure vulnerability.

Local attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

Note: This issue was previously covered in BID 63282(Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security Vulnerabilities), but has been given its own record to better document it.

These issues affect OS X versions prior to 10.9.

Apple Mac OS X CVE-2013-5191 Local Information Disclosure Vulnerability

An attacker requires local interactive access to exploit the issue.

Apple Mac OS X CVE-2013-5191 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X CVE-2013-5191 Local Information Disclosure Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• APPLE-SA-2013-10-22-3 OS X Mavericks v10.9 (Apple)