Vulnerabilities > CVE-2005-2748 - Unspecified vulnerability in Apple mac OS X and mac OS X Server
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN apple
nessus
Summary
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 4 |
Nessus
NASL family | MacOS X Local Security Checks |
NASL id | MACOSX_SECUPD2005-008.NASL |
description | The remote host is running Apple Mac OS X, but lacks Security Update 2005-008. This security update contains fixes for the following applications : - ImageIO - LibSystem - Mail - QuickDraw - Ruby - SecurityAgent - securityd |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 19773 |
published | 2005-09-23 |
reporter | This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/19773 |
title | Mac OS X Multiple Vulnerabilities (Security Update 2005-008) |
code |
|
References
- http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
- http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
- http://secunia.com/advisories/16920/
- http://secunia.com/advisories/16920/
- http://www.auscert.org.au/5509
- http://www.auscert.org.au/5509
- http://www.ciac.org/ciac/bulletins/p-312.shtml
- http://www.ciac.org/ciac/bulletins/p-312.shtml
- http://www.suresec.org/advisories/adv7.pdf
- http://www.suresec.org/advisories/adv7.pdf