Vulnerabilities > CVE-2007-0023 - Unspecified vulnerability in Apple mac OS X 10.4.8
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN apple
nessus
Summary
The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user's home directory, which is executed when Cocoa applications attempt to notify the user.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 1 |
Nessus
NASL family | MacOS X Local Security Checks |
NASL id | MACOSX_SECUPD2007-002.NASL |
description | The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2007-002 applied. This update fixes security flaws in the following applications : - Finder - iChat - UserNotification |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 24354 |
published | 2007-02-16 |
reporter | This script is Copyright (C) 2007-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/24354 |
title | Mac OS X Multiple Vulnerabilities (Security Update 2007-002) |
code |
|
Packetstorm
data source | https://packetstormsecurity.com/files/download/53874/MOAB-22-01-2007.rb.txt |
id | PACKETSTORM:53874 |
last seen | 2016-12-05 |
published | 2007-01-24 |
reporter | Kevin Finisterre |
source | https://packetstormsecurity.com/files/53874/MOAB-22-01-2007.rb.txt.html |
title | MOAB-22-01-2007.rb.txt |
References
- http://docs.info.apple.com/article.html?artnum=305102
- http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html
- http://projects.info-pull.com/moab/MOAB-22-01-2007.html
- http://secunia.com/advisories/23846
- http://secunia.com/advisories/24198
- http://securitytracker.com/id?1017542
- http://www.kb.cert.org/vuls/id/315856
- http://www.osvdb.org/32695
- http://www.securityfocus.com/bid/22188
- http://www.us-cert.gov/cas/techalerts/TA07-047A.html
- http://www.vupen.com/english/advisories/2007/0074
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31676
- http://docs.info.apple.com/article.html?artnum=305102
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31676
- http://www.vupen.com/english/advisories/2007/0074
- http://www.us-cert.gov/cas/techalerts/TA07-047A.html
- http://www.securityfocus.com/bid/22188
- http://www.osvdb.org/32695
- http://www.kb.cert.org/vuls/id/315856
- http://securitytracker.com/id?1017542
- http://secunia.com/advisories/24198
- http://secunia.com/advisories/23846
- http://projects.info-pull.com/moab/MOAB-22-01-2007.html
- http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html