| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / november, 2004 / Apple Mac OS X CoreFoundation CFPlugIn ... 

Apple Mac OS X CoreFoundation CFPlugIn ...

Apple Mac OS X CoreFoundation CFPlugIn ...

Date Discovered: September 7, 2004
Date Published: October 29, 2004
Last Updated: October 29, 2004

Vulnerability Description

Vulnerability ID:          31655
Discovered by:            Kikuchi Masashi
Exploitable Locally:     Yes
Exploitable Remotely: No
Impact:                        Local attackers can gain escalated privileges.
Root Cause:                 Software Vulnerability

Apple Mac OS X contains a vulnerability that may allow local attackers to gain escalated privileges. The vulnerability is due to plugin executables being automatically loaded with the CoreFoundation CFPlubIn facilities. Local attackers can exploit this vulnerability to gain higher privileges.

 

 

More information on CA Vulnerability Information Center: 
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=31655

Computer Associates – the Trusted Source of Security Knowledge

 

2004-11-02 11:19

Back