CVE

Id
23824  
CVE No.
CVE-2007-0467  
Status
Candidate  
Description
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/.  
Phase
Assigned (20070123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
231836 23824 CVE-2007-0467 MISC:http://projects.info-pull.com/moab/MOAB-28-01-2007.html  View
231837 23824 CVE-2007-0467 CONFIRM:http://docs.info.apple.com/article.html?artnum=305214  View
231838 23824 CVE-2007-0467 APPLE:APPLE-SA-2007-03-13  View
231839 23824 CVE-2007-0467 URL:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html  View
231840 23824 CVE-2007-0467 CERT:TA07-072A  View
231841 23824 CVE-2007-0467 URL:http://www.us-cert.gov/cas/techalerts/TA07-072A.html  View
231842 23824 CVE-2007-0467 CERT-VN:VU#363112  View
231843 23824 CVE-2007-0467 URL:http://www.kb.cert.org/vuls/id/363112  View
231844 23824 CVE-2007-0467 VUPEN:ADV-2007-0930  View
231845 23824 CVE-2007-0467 URL:http://www.vupen.com/english/advisories/2007/0930  View
231846 23824 CVE-2007-0467 OSVDB:32706  View
231847 23824 CVE-2007-0467 URL:http://www.osvdb.org/32706  View
231848 23824 CVE-2007-0467 SECTRACK:1017751  View
231849 23824 CVE-2007-0467 URL:http://www.securitytracker.com/id?1017751  View
231850 23824 CVE-2007-0467 SECUNIA:24479  View
231851 23824 CVE-2007-0467 URL:http://secunia.com/advisories/24479  View
231852 23824 CVE-2007-0467 XF:macos-crashreporterd-privilege-escalation(31888)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56295 JVNDB-2007-004987 RubyGems の installer.rb におけるサービス運用妨害 (DoS) の脆弱性 RubyGems の installer.rb の extract_files 関数は、上書きされる前にファイルが存在するかどうかをチェックしないため、任意のファイルを上書きされる、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2007-0469 23824 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004987.html  View