CVE

Id
20496  
CVE No.
CVE-2006-4392  
Status
Candidate  
Description
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child"s thread context and task address space in a way that causes the child to call a parent-controlled function.  
Phase
Assigned (20060828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
192236 20496 CVE-2006-4392 BUGTRAQ:20060929 Matasano Advisory: MacOS X Mach Exception Server Privilege Escalation  View
192237 20496 CVE-2006-4392 URL:http://www.securityfocus.com/archive/1/archive/1/447396/100/0/threaded  View
192238 20496 CVE-2006-4392 MISC:http://www.matasano.com/log/530/matasano-advisory-macos-x-mach-exception-server-privilege-escalation/  View
192239 20496 CVE-2006-4392 APPLE:APPLE-SA-2006-09-29  View
192240 20496 CVE-2006-4392 URL:http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html  View
192241 20496 CVE-2006-4392 CERT:TA06-275A  View
192242 20496 CVE-2006-4392 URL:http://www.us-cert.gov/cas/techalerts/TA06-275A.html  View
192243 20496 CVE-2006-4392 CERT-VN:VU#838404  View
192244 20496 CVE-2006-4392 URL:http://www.kb.cert.org/vuls/id/838404  View
192245 20496 CVE-2006-4392 BID:20271  View
192246 20496 CVE-2006-4392 URL:http://www.securityfocus.com/bid/20271  View
192247 20496 CVE-2006-4392 VUPEN:ADV-2006-3852  View
192248 20496 CVE-2006-4392 URL:http://www.vupen.com/english/advisories/2006/3852  View
192249 20496 CVE-2006-4392 OSVDB:29269  View
192250 20496 CVE-2006-4392 URL:http://www.osvdb.org/29269  View
192251 20496 CVE-2006-4392 SECTRACK:1016954  View
192252 20496 CVE-2006-4392 URL:http://securitytracker.com/id?1016954  View
192253 20496 CVE-2006-4392 SECUNIA:22187  View
192254 20496 CVE-2006-4392 URL:http://secunia.com/advisories/22187  View
192255 20496 CVE-2006-4392 SREASON:1663  View
192256 20496 CVE-2006-4392 URL:http://securityreason.com/securityalert/1663  View
192257 20496 CVE-2006-4392 XF:macos-kernel-code-execution(29281)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58462 JVNDB-2006-000658 Apple Mac OS X の LoginWindow におけるサービスアクセス制御回避の脆弱性 Apple Mac OS X の LoginWindow には、論理エラーによる不適切な処理により GUID のないネットワークアカウントがサービスアクセス制御を回避される脆弱性が存在します。 CVE-2006-4394 20496 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000658.html  View