Description
The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.
References
- 34855 vdb-entry
- 24966 third-party-advisory
- TA07-072A third-party-advisory
- APPLE-SA-2007-03-13 vendor-advisory
- 22948 vdb-entry
- http://docs.info.apple.com/article.html?artnum=305391
- http://docs.info.apple.com/article.html?artnum=305214
- 1017751 vdb-entry
- macos-hid-privilege-escalation(32973) vdb-entry
- 1017942 vdb-entry
- TA07-109A third-party-advisory
- ADV-2007-0930 vdb-entry
- APPLE-SA-2007-04-19 vendor-advisory
- ADV-2007-1470 vdb-entry
- 24479 third-party-advisory