Description
Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<" variable to set uid, which allows attackers to gain privileges.
References
- macos-perl-bypass-security(23561) vdb-entry
- ADV-2005-2869 vdb-entry
- 21800 vdb-entry
- 19064 third-party-advisory
- 16907 vdb-entry
- ADV-2006-0791 vdb-entry
- APPLE-SA-2006-03-01 vendor-advisory
- TA06-062A third-party-advisory
- 15833 vdb-entry
- 17922 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=303382