CVE

Id
49428  
CVE No.
CVE-2011-1516  
Status
Candidate  
Description
The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.  
Phase
Assigned (20110323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536493 49428 CVE-2011-1516 BUGTRAQ:20111110 CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass  View
536494 49428 CVE-2011-1516 URL:http://www.securityfocus.com/archive/1/archive/1/520479/100/100/threaded  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31450 JVNDB-2011-001690 Python の urllib および urllib2 モジュールにおける重要な情報を取得される脆弱性 Python の urllib および urllib2 モジュールは、file: URLs にリダイレクトする Location ヘッダを処理する際、重要な情報を取得される、またはサービス運用妨害 (リソース消費) 状態となる脆弱性が存在します。 CVE-2011-1521 49428 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001690.html  View