Description
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application.
References
- P-312 third-party-advisory government-resource
- http://www.suresec.org/advisories/adv7.pdf
- ESB-2005.0732 third-party-advisory
- APPLE-SA-2005-09-22 vendor-advisory
- 16920 third-party-advisory