CVE-2007-4685

Summary

The kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to gain privileges by executing setuid or setgid programs in which the stdio, stderr, or stdout file descriptors are "in an unexpected state."

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://securitytracker.com/id?1018950
• http://www.securityfocus.com/bid/26444
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
• http://docs.info.apple.com/article.html?artnum=307041
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38469
• http://www.vupen.com/english/advisories/2007/3868
• http://secunia.com/advisories/27643
• http://www.us-cert.gov/cas/techalerts/TA07-319A.html

References

• http://securitytracker.com/id?1018950
• http://www.securityfocus.com/bid/26444
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
• http://docs.info.apple.com/article.html?artnum=307041
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38469
• http://www.vupen.com/english/advisories/2007/3868
• http://secunia.com/advisories/27643
• http://www.us-cert.gov/cas/techalerts/TA07-319A.html

• ←Previous
• Next→