critical10.0Public exploit code
CVE-2007-0117
DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation2007-01-05 · local · osx · Verified
- Apple Mac OSX 10.4.8 - DiskManagement BOM Privilege Escalation2007-01-05 · local · osx · Verified
Impact
DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil permission repair operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Version 10.4.8 |
| Apple | Mac Os X Server | Version 10.4.8 |
References
- NVD record
- CVE.org record
- http://osvdb.org/31167
- http://projects.info-pull.com/moab/MOAB-05-01-2007.html
- http://secunia.com/advisories/23653
- http://www.securityfocus.com/bid/21899
- http://www.vupen.com/english/advisories/2007/0074
- http://osvdb.org/31167
- http://projects.info-pull.com/moab/MOAB-05-01-2007.html
- http://secunia.com/advisories/23653
- http://www.securityfocus.com/bid/21899
- http://www.vupen.com/english/advisories/2007/0074