Description
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.
References
- 23793 third-party-advisory
- 24966 third-party-advisory
- http://projects.info-pull.com/moab/MOAB-21-01-2007.html
- http://docs.info.apple.com/article.html?artnum=305391
- 31605 vdb-entry
- TA07-109A third-party-advisory
- 1017941 vdb-entry
- macos-writeconfig-privilege-escalation(31677) vdb-entry
- APPLE-SA-2007-04-19 vendor-advisory
- ADV-2007-1470 vdb-entry
- ADV-2007-0074 vdb-entry
- 22148 vdb-entry