The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the _POSIX_SPAWN_DISABLE_ASLR and _POSIX_SPAWN_ALLOW_DATA_EXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the posix_spawnattr_setflags function.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2013-06-05T10:00:00Z
Updated: 2024-09-16T23:45:48.104Z
Reserved: 2013-06-05T00:00:00Z
Link: CVE-2013-3949
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2013-06-05T14:39:55.860
Modified: 2013-06-05T14:39:55.860
Link: CVE-2013-3949
Redhat
No data.