Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability

  1. Network Vulnerabilities
  2. Mac OS X Local Security Checks
  3. Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability
Summary
This host is installed with Mac OS X and is prone to privilege escalation vulnerability.
Impact
Successful exploitation will allow attackers to execute arbitrary code with elevated privileges. Impact Level: System
Solution
Upgrade to Mac OS X / Mac OS X Server version 10.6.7 or later, For updates refer to http://support.apple.com/kb/HT4581
Insight
The flaw is due to a privilege checking issue exists in the i386_set_ldt system call, while handling call gates. Which allows local users to gain privileges via vectors involving the creation of a call gate entry.
Affected
Mac OS X version 10.6 through 10.6.6 Mac OS X Server version 10.6 through 10.6.6
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities