Published: 31/01/2007 Updated: 29/07/2017

CVSS v2 Base Score: 6.2 | Impact Score: 10 | Exploitability Score: 1.9

VMScore: 625

Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x 10.4.8

#!/usr/bin/ruby # Copyright (c) 2007 Kevin Finisterre <kf_lists [at] digitalmunitioncom> # Lance M Havok <lmh [at] info-pullcom> # All pwnage reserved # # 1) Stop crashdump from writing to ~/Library/Logs via chmod 000 ~/Library/Logs/CrashReporter # 2) Make symlink to /Library/Logs/CrashReporter/knownprogcrashl ...

NVD-CWE-Other http://projects.info-pull.com/moab/MOAB-28-01-2007.html http://docs.info.apple.com/article.html?artnum=305214 http://www.securitytracker.com/id?1017751 http://secunia.com/advisories/24479 http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://www.kb.cert.org/vuls/id/363112 http://www.osvdb.org/32706 http://www.vupen.com/english/advisories/2007/0930 https://exchange.xforce.ibmcloud.com/vulnerabilities/31888 https://nvd.nist.gov https://www.exploit-db.com/exploits/3219/https://www.kb.cert.org/vuls/id/363112

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0467

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect