CVE-2008-2324

Impact

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
• http://secunia.com/advisories/31326
• http://www.securityfocus.com/bid/30483
• http://www.securityfocus.com/bid/30492
• http://www.securitytracker.com/id?1020605
• http://www.vupen.com/english/advisories/2008/2268
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44132
• http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
• http://secunia.com/advisories/31326
• http://www.securityfocus.com/bid/30483
• http://www.securityfocus.com/bid/30492
• http://www.securitytracker.com/id?1020605
• http://www.vupen.com/english/advisories/2008/2268
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44132