37 matches found
CVE-2009-2828
CVE-2009-2828 affects Apple Mac OS X 10.5.8 and targets the DirectoryService component. The vulnerability is described as a memory corruption issue in DirectoryService that could allow remote attackers to cause an application crash or execute arbitrary code via unspecified vectors. The provided d...
CVE-2009-2828: Undefined Security Weakness
The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...
Mac OS X Multiple Vulnerabilities (Security Update 2009-006)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied. This security update contains fixes for the following products : - AFP Client - Adaptive Firewall - Apache - Apache Portable Runtime - ATS - Certificate Assistant - CoreGraphics - CUPS -...
Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit
No description provided by source. / OS X = 10.2.4 DirectoryService local root PATH exploit DirectoryService must be crashed prior to execution, per @stake advisory. If you discover how to crash DirectoryService e-mail me at [email protected] Neeko Oni -- Assuming DirectoryService has been...
Apple Mac OS X DirectoryService may allow arbitrary users to change the root password
Overview A vulnerabilty in the Apple Mac OS X DirectoryService may allow unprivileged users to change the root password. Description The Apple Mac OS X DirectoryService contains a vulnerability that may allow unprivileged LDAP users to change the local root password. According to Apple security...
CVE-2007-0723
Unspecified vulnerability in the authentication feature for DirectoryService DS Plug-Ins for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors...
Authentication flaw
Unspecified vulnerability in the authentication feature for DirectoryService DS Plug-Ins for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors...
CVE-2007-0723
This CVE affects Apple Mac OS X DirectoryService DS Plug-Ins in Mac OS X 10.3.9 and 10.4 up to 10.4.8. The issue is an authentication flaw in DirectoryService that allows remote authenticated LDAP users to modify the local root password and gain privileges. The underlying vectors are not publicly...
CVE-2007-0723
Unspecified vulnerability in the authentication feature for DirectoryService DS Plug-Ins for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors...
CVE-2007-0723: Undefined Security Weakness
Unspecified vulnerability in the authentication feature for DirectoryService DS Plug-Ins for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors...
Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include int mainint argc, char argv char ORIGPATH; int temp; if argc 2 if geteuid == 0 printf"euid is root.\n"; setuid0; execl"/bin/bash", "bash", NULL;...
Apple Mac OSX 10.2.4 - DirectoryService 'PATH' Local Privilege Escalation
/ OS X include include include int mainint argc, char argv char ORIGPATH; int temp; if argc 2 if geteuid == 0 printf"euid is root.\n"; setuid0; execl"/bin/bash", "bash", NULL; strcpyORIGPATH, getenv"PATH"; printf"Original path: %s\n", ORIGPATH; setenv"PATH", ".", 1; printf"New path: %s\n",...
Apple Mac OSX 10.2.4 - DirectoryService PATH Local Privilege Escalation
Apple Mac OSX 10.2.4 - DirectoryService PATH Local Privilege Escalation / OS X include include include int mainint argc, char argv char ORIGPATH; int temp; if argc 2 if geteuid == 0 printf"euid is root.\n"; setuid0; execl"/bin/bash", "bash", NULL; strcpyORIGPATH, getenv"PATH"; printf"Original pat...
MacOS X DirectoryService privelege escalation
External touch command is executed without full path...
MacOS X DirectoryService Privilege Escalation (a041003-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: MacOS X DirectoryService Privilege Escalation and DoS Attack Release Date: 04/10/2003 Application: /usr/sbin/DirectoryService Platform: MacOS X 10.2.4 and below Severity: Local users can ga...
Apple Mac OSX 10.x - DirectoryService Denial of Service
Apple Mac OSX 10.x - DirectoryService Denial of Service // source: https://www.securityfocus.com/bid/7323/info MacOSX DirectoryService has been reported prone to a denial of service vulnerability. It has been reported that a remote attacker may trigger an exception in DirectoryService by repeated...
Apple Mac OSX 10.x - DirectoryService Denial of Service
// source: https://www.securityfocus.com/bid/7323/info MacOSX DirectoryService has been reported prone to a denial of service vulnerability. It has been reported that a remote attacker may trigger an exception in DirectoryService by repeatedly connecting to specific network ports. / OS X include...