Title: Apple Mac OS X Kernel Mach Exception Ports Local Privilege Escalation
Info
Disclosure
Sep 27, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the exception handling mechanism for a privileged program is subverted by a local user who has access to the privileged program, such as a SUID binary. This flaw may lead to a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Other
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 10.4.8 or higher, as it has been reported to fix this vulnerability. Apple has also supplied Security Update 2006-006 for Mac OS 10.3.9. An upgrade is required as there are no known workarounds.