The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.
2006-10-03T04:02:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 7.2 (HIGH)
AV:L/AC:L/Au:N/C:C/I:C/A:C
3.9
10.0
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | apple | mac_os_x | 10.4 | Yes |
Operating System | apple | mac_os_x | 10.4.1 | Yes |
Operating System | apple | mac_os_x | 10.4.2 | Yes |
Operating System | apple | mac_os_x | 10.4.3 | Yes |
Operating System | apple | mac_os_x | 10.4.4 | Yes |
Operating System | apple | mac_os_x | 10.4.5 | Yes |
Operating System | apple | mac_os_x | 10.4.6 | Yes |
Operating System | apple | mac_os_x | 10.4.7 | Yes |
Operating System | next | openstep | 4.1 | Yes |