CVE-2007-0117: Critical severity Apple Mac OS X Server vulnerability

Published Jan 9, 2007

Updated

DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil permission repair operation.

Affected Software

2 affected components

Apple Mac OS X Server=10.4.8

Apple iOS and macOS=10.4.8

Event History

Jan 9, 2007

CVE Published

02:28 AM

Data Sourced

via NVD·02:28 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0117?

CVE-2007-0117 has a high severity rating due to its potential for privilege escalation.

How do I fix CVE-2007-0117?

To fix CVE-2007-0117, ensure that you update your Mac OS X to a version that addresses this vulnerability.

What systems are affected by CVE-2007-0117?

CVE-2007-0117 affects Mac OS X 10.4.8 and Mac OS X Server 10.4.8.

What type of attack does CVE-2007-0117 enable?

CVE-2007-0117 enables attackers to gain privileges through improperly validated Bill of Materials files.

What is the exploit mechanism for CVE-2007-0117?

The exploit mechanism for CVE-2007-0117 involves triggering arbitrary file permission changes upon execution of a diskutil command.