NVD

Id
55896  
Name
CVE-2007-3749  
Description
The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-14  
Modified Date
2011-03-07  
Seq
2007-3749  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284305 55896 CVE-2007-3749 http://docs.info.apple.com/article.html?artnum=307041  View
284306 55896 CVE-2007-3749 20071114 Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability  View
284307 55896 CVE-2007-3749 APPLE-SA-2007-11-14  View
284308 55896 CVE-2007-3749 26444  View
284309 55896 CVE-2007-3749 TA07-319A  View
284310 55896 CVE-2007-3749 ADV-2007-3868  View
284311 55896 CVE-2007-3749 macosx-mach-privilege-escalation(38466)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52263 JVNDB-2007-000953 Apple Mac OS X のカーネルにおける Mach スレッドなどのリセット処理の不備により任意のコードを実行される脆弱性 Apple Mac OS X のカーネルには、setuid プログラムを実行している際、現行の Mach スレッドポートやスレッド例外ポートをリセットしないため、任意のコードを実行される可能性があります。 CVE-2007-3749 27104 CVE-2007-3749 55896 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000953.html 2007-11-14 2007-12-04 View