Apple MacOS X Terminal sudo command Unauthorized Access Vulnerability

Bugtraq ID:	9069
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 19 2003 12:00AM
Updated:	Nov 19 2003 12:00AM
Credit:	The disclosure of this issue has been credited to Rick Downes <[email protected]>.
Vulnerable:	Apple Mac OS X 10.3 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.3
Not Vulnerable:

Apple MacOS X Terminal sudo command Unauthorized Access Vulnerability

It has been reported that certain versions of Apple MacOS X running on laptops are vulnerable to an issue that may allow a physical attacker to gain unauthorized access to the system. The problem is reported to exist in the sudo command implemented by the Terminal application that does not properly verify password information under certain circumstances.

This issue has been tested on laptops running Apple OS X 10.2.3 Jaguar, OS X 10.2.7 Jaguar, and OS X 10.3 Panther however other versions may be affected as well.

Apple MacOS X Terminal sudo command Unauthorized Access Vulnerability

No exploit is required.

Apple MacOS X Terminal sudo command Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Apple MacOS X Terminal sudo command Unauthorized Access Vulnerability

References:

• Mac OS X Homepage (Apple)