CVE-2006-4392: High severity Apple iOS and macOS vulnerability
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4392?
CVE-2006-4392 is classified as a moderate severity vulnerability due to its potential for local privilege escalation.
What operating systems are affected by CVE-2006-4392?
CVE-2006-4392 affects Mac OS X versions 10.4 through 10.4.7 and OpenStep prior to version 4.2.
How do I fix CVE-2006-4392?
To mitigate CVE-2006-4392, users should upgrade to a patched version of Mac OS X or OpenStep that is not vulnerable to this exploit.
What attack vector does CVE-2006-4392 utilize?
CVE-2006-4392 can be exploited by local users to gain elevated privileges through a crafted parent process.
Is CVE-2006-4392 a remote vulnerability?
No, CVE-2006-4392 is not a remote vulnerability and requires local access to the affected system to exploit.