OSVDB ID: 16075

Title: Apple Mac OS X chfn/chpass/chsh Privilege Escalation

Info

Disclosure
May 03, 2005

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered by an unspecified flaw in chfn, chpass and chsh, which run SUID. This flaw may lead to a loss of integrity. No further details have been provided.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.

Mac OS X

 10.3
10.3.1
10.3.2
10.3.4
10.3.3
10.3.5
10.3.6
10.3.7
10.3.8
10.3.9

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/16075