Title: Apple Mac OS X dyld Error Output Local Information Disclosure
Info
Disclosure
Jul 14, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
Mac OS X contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious local user specifies dynamic linker options that cause privileged applications to display information to standard output which the user is not authorized to view, resulting in a loss of confidentiality.
Classification
Location:
Local Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch (Security Update 2006-004) to address this vulnerability.