MacOS X Local Root Privilege Elevation Vulnerability
BID:8945
Info
MacOS X Local Root Privilege Elevation Vulnerability
| Bugtraq ID: | 8945 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2003-1011 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 31 2003 12:00AM |
| Updated: | Jul 12 2009 12:56AM |
| Credit: | This vulnerability was reported by Jason Storm <[email protected]>. |
| Vulnerable: |
Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 |
| Not Vulnerable: |
Apple Mac OS X 10.3 |
Discussion
MacOS X Local Root Privilege Elevation Vulnerability
It has been reported that an attacker with a specific hardware configuration may be capable of gaining root privileges on MacOS X. The problem is said to occur when a user on a system with a USB keyboard, holds a specific key sequence down for an unspecified length. This is said to effectively crash the init process, and drop the user into a shell with root privileges.
It has been reported that an attacker with a specific hardware configuration may be capable of gaining root privileges on MacOS X. The problem is said to occur when a user on a system with a USB keyboard, holds a specific key sequence down for an unspecified length. This is said to effectively crash the init process, and drop the user into a shell with root privileges.
Exploit / POC
MacOS X Local Root Privilege Elevation Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
MacOS X Local Root Privilege Elevation Vulnerability
Solution:
This issue has been addressed in supported Mac OS X versions with Security Update 2003-12-19.
Apple Mac OS X 10.2.8
Apple Mac OS X Server 10.2.8
Apple Mac OS X 10.3.2
Apple Mac OS X Server 10.3.2
Solution:
This issue has been addressed in supported Mac OS X versions with Security Update 2003-12-19.
Apple Mac OS X 10.2.8
-
Apple SecurityUpd2003-12-19Jag.dmg
http://download.info.apple.com/Mac_OS_X/061-0985.20031219.cplk8/2Z/Sec urityUpd2003-12-19Jag.dmg
Apple Mac OS X Server 10.2.8
-
Apple SecurityUpd2003-12-19Jag.dmg
http://download.info.apple.com/Mac_OS_X/061-0985.20031219.cplk8/2Z/Sec urityUpd2003-12-19Jag.dmg
Apple Mac OS X 10.3.2
-
Apple SecurityUpd2003-12-19.dmg
http://download.info.apple.com/Mac_OS_X/061-0983.20031219.vfr2q/2Z/Sec urityUpd2003-12-19.dmg
Apple Mac OS X Server 10.3.2
-
Apple SecurityUpd2003-12-19.dmg
http://download.info.apple.com/Mac_OS_X/061-0983.20031219.vfr2q/2Z/Sec urityUpd2003-12-19.dmg
References
MacOS X Local Root Privilege Elevation Vulnerability
References:
References:
- Security Update 2003-12-19 (Jaguar) (Apple)
- Security Update 2003-12-19 (Panther) (Apple)
- Console Root On OSX up to 10.2.8 (Jason Storm
)