CVE

Id
27106  
CVE No.
CVE-2007-3749  
Status
Candidate  
Description
The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.  
Phase
Assigned (20070712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277330 27106 CVE-2007-3749 IDEFENSE:20071114 Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability  View
277331 27106 CVE-2007-3749 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=630  View
277332 27106 CVE-2007-3749 CONFIRM:http://docs.info.apple.com/article.html?artnum=307041  View
277333 27106 CVE-2007-3749 APPLE:APPLE-SA-2007-11-14  View
277334 27106 CVE-2007-3749 URL:http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html  View
277335 27106 CVE-2007-3749 CERT:TA07-319A  View
277336 27106 CVE-2007-3749 URL:http://www.us-cert.gov/cas/techalerts/TA07-319A.html  View
277337 27106 CVE-2007-3749 BID:26444  View
277338 27106 CVE-2007-3749 URL:http://www.securityfocus.com/bid/26444  View
277339 27106 CVE-2007-3749 VUPEN:ADV-2007-3868  View
277340 27106 CVE-2007-3749 URL:http://www.vupen.com/english/advisories/2007/3868  View
277341 27106 CVE-2007-3749 SECUNIA:27643  View
277342 27106 CVE-2007-3749 URL:http://secunia.com/advisories/27643  View
277343 27106 CVE-2007-3749 XF:macosx-mach-privilege-escalation(38466)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52233 JVNDB-2007-000923 Apple QuickTime の QuickTime for Java における任意のコードを実行される脆弱性 Apple QuickTime には QuickTime for Java において、信頼性のない Java アプレットにより、権限昇格され、任意のコードを実行される脆弱性が存在します。 CVE-2007-3751 27106 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000923.html  View