Info

Disclosure

Feb 28, 2006

Discovery

Aug 23, 2005

Dates

Exploit

Mar 22, 2006

Solution

Unknown

Description

Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the passwd command is used with the option to specify a database to operate on. The passwd command does not verify that the user has permission to create the specified file before proceeding, and may lead to a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Other
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch (2006-001) to address this vulnerability.

Products

Apple Computer, Inc.	Mac OS X	10.3.x
		10.4
		10.4.1
		10.4.2
		10.4.3
		10.4.4
		10.4.5

References

Milw0rm: 1545
Exploit Database: 1545
Secunia Advisory ID: 19064
CVE ID: 2005-2713 (see also: NVD)
Related OSVDB ID: 23636 23637 23638 23639 23640 23641 23642 23643 23644 23645 23647 23648 23649
VUPEN Advisory: ADV-2006-0791
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-02/0597.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0790.html
Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=303382
Other Advisory URL: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400
News Article: http://www.informationweek.com/news/showArticle.jhtml;?articleID=181500394
Generic Exploit URL: http://www.securiteam.com/exploits/5MP0Q0KI0G.html

Credit

vade79 - v9fakehalo.org -
Ilja van Sprundel -

Direct URL: http://osvdb.org/23646

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Apple Computer, Inc.

Mac OS X

References

Credit