NVD

Id
63030  
Name
CVE-2006-4392  
Description
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child"s thread context and task address space in a way that causes the child to call a parent-controlled function.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-03  
Modified Date
2011-03-07  
Seq
2006-4392  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328196 63030 CVE-2006-4392 APPLE-SA-2006-09-29  View
328197 63030 CVE-2006-4392 1663  View
328198 63030 CVE-2006-4392 1016954  View
328199 63030 CVE-2006-4392 VU#838404  View
328200 63030 CVE-2006-4392 http://www.matasano.com/log/530/matasano-advisory-macos-x-mach-exception-server-privilege-escalation/  View
328201 63030 CVE-2006-4392 20060929 Matasano Advisory: MacOS X Mach Exception Server Privilege Escalation  View
328202 63030 CVE-2006-4392 20271  View
328203 63030 CVE-2006-4392 TA06-275A  View
328204 63030 CVE-2006-4392 ADV-2006-3852  View
328205 63030 CVE-2006-4392 macos-kernel-code-execution(29281)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58463 JVNDB-2006-000659 Apple Mac OS X の Mach 例外ポートにおけるカーネルエラー処理の脆弱性 Apple Mac OS X の Mach 例外ポートと呼ばれるカーネルのエラー処理メカニズムにおいて不備が存在し、特定の種類のエラー発生時に権限を持った細工されたプログラムの実行を許してしまう脆弱性が存在します。 CVE-2006-4392 20494 CVE-2006-4392 63030 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000659.html 2006-09-29 2007-04-01 View