Lucene search

[email protected]CVE-2011-0182

HistoryMar 23, 2011 - 2:00 a.m.

CVE-2011-0182

2011-03-2302:00:05

CWE-20

[email protected]

web.nvd.nist.gov

cve-2011-0182

i386_set_ldt

call gates

privilege escalation

apple

mac os x

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.

Affected configurations

NVD

Node

applemac_os_xRange≤10.6.6

applemac_os_xMatch10.6.0

applemac_os_xMatch10.6.1

applemac_os_xMatch10.6.2

applemac_os_xMatch10.6.3

applemac_os_xMatch10.6.4

applemac_os_xMatch10.6.5

Node

applemac_os_x_serverRange≤10.6.6

applemac_os_x_serverMatch10.6.0

applemac_os_x_serverMatch10.6.1

applemac_os_x_serverMatch10.6.2

applemac_os_x_serverMatch10.6.3

applemac_os_x_serverMatch10.6.4

applemac_os_x_serverMatch10.6.5

CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.6.6
apple:mac_os_xapple mac os xeq10.6.0
apple:mac_os_xapple mac os xeq10.6.1
apple:mac_os_xapple mac os xeq10.6.2
apple:mac_os_xapple mac os xeq10.6.3
apple:mac_os_xapple mac os xeq10.6.4
apple:mac_os_xapple mac os xeq10.6.5

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	le	10.6.6
apple:mac_os_x	apple mac os x	eq	10.6.0
apple:mac_os_x	apple mac os x	eq	10.6.1
apple:mac_os_x	apple mac os x	eq	10.6.2
apple:mac_os_x	apple mac os x	eq	10.6.3
apple:mac_os_x	apple mac os x	eq	10.6.4
apple:mac_os_x	apple mac os x	eq	10.6.5