XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user.
References
| Link | Resource |
|---|---|
| http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html | Mailing List Vendor Advisory |
| http://secunia.com/advisories/33937 | Broken Link |
| http://securitytracker.com/alerts/2009/Feb/1021729.html | Broken Link Third Party Advisory VDB Entry |
| http://support.apple.com/kb/HT3438 | Third Party Advisory |
| http://www.securityfocus.com/bid/33798 | Broken Link Third Party Advisory VDB Entry |
| http://www.vupen.com/english/advisories/2009/0422 | Permissions Required |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/48727 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
25 Jan 2024, 21:31
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-732 | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
| References | () http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - Mailing List, Vendor Advisory | |
| References | () http://secunia.com/advisories/33937 - Broken Link | |
| References | () http://securitytracker.com/alerts/2009/Feb/1021729.html - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://support.apple.com/kb/HT3438 - Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/33798 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.vupen.com/english/advisories/2009/0422 - Permissions Required | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/48727 - Third Party Advisory, VDB Entry |
Information
Published : 2009-02-13 00:30
Updated : 2024-01-25 21:31
NVD link : CVE-2009-0141
Mitre link : CVE-2009-0141
CVE.ORG link : CVE-2009-0141
JSON object : View
Products Affected
apple
- mac_os_x_server
- mac_os_x
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource