Description
Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file.
References
- 33937 third-party-advisory
- 33759 vdb-entry
- http://support.apple.com/kb/HT3438
- APPLE-SA-2009-02-12 vendor-advisory
- 51979 vdb-entry
- macosx-certificate-asst-file-overwrite(48715) vdb-entry
- ADV-2009-0422 vdb-entry
- 1021720 vdb-entry