OSVDB ID: 34855

Title: Apple Mac OS X IOKit HID Interface Local Privilege Escalation

Info

Disclosure

Mar 14, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered by the failure of the IOKit HID interface to properly restrict access to some events, and will allow a local attacker to access sensitive information. This flaw may lead to a loss of confidentiality.

Classification

Location: Local Access Required
Attack Type: Misconfiguration
Impact: Loss of Confidentiality
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.

Mac OS X

10.4
10.4.1
10.4.2
10.4.3
10.4.4
10.4.5
10.4.6
10.4.7
10.4.8

References

Credit

  • Andrew Garber -
  • Michael Evans -
  • Alex Harper -


Direct URL: http://osvdb.org/34855