Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

CVE编号

CVE-2008-2830

利用情况

暂无

补丁情况

N/A

披露时间

2008-06-24

漏洞描述

Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally demonstrated by an osascript tell command to ARDAgent.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://it.slashdot.org/it/08/06/18/1919224.shtml
http://lists.apple.com/archives/security-announce//2008//Sep/msg00006.html
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
http://secunia.com/advisories/30776
http://www.securityfocus.com/bid/29831
http://www.securitytracker.com/id?1020345
http://www.vupen.com/english/advisories/2008/1905/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43294

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	系统	apple	mac_os_x	10.4	-
	运行在以下环境
	系统	apple	mac_os_x	10.5	-

CVSS3评分 7.2

• 攻击路径 本地
• 攻击复杂度 低
• 权限要求 无
• 影响范围 N/A
• 用户交互 无
• 可用性 完全地
• 保密性 完全地
• 完整性 完全地

AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-ID	漏洞类型
CWE-264	权限、特权和访问控制

Exp相关链接

• https://www.exploit-db.com/exploits/31940

- avd.aliyun.com