|
|
Info |
Last Modified |
| 7 months ago |
|
|
|
|
Description |
Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the account option "Allow user to administer this computer" is unchecked, but the user is not removed from the appserveradm or appserverusr groups. This flaw may allow a non-administrative user to administer WebObjects applications, leading to a loss of integrity.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Authentication Management,
Misconfiguration
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.
|
|
Products |
|
Mac OS X
 |
10.4 |
10.4.1 |
10.4.2 |
10.4.3 |
10.4.4 |
10.4.5 |
10.4.6 |
10.4.7 |
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|