Description
The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.
References
- 31189 vdb-entry
- 1020877 vdb-entry
- APPLE-SA-2008-09-15 vendor-advisory
- TA08-260A third-party-advisory
- ADV-2008-2584 vdb-entry
- 31882 third-party-advisory
- macos-kernel-security-bypass(45169) vdb-entry