CVE-2011-3216: Low severity apple ios and macos vulnerability
Published Oct 14, 2011
·Updated
The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete files via an unlink system call.
Affected Software
136 affected components
Apple iOS and macOS=10.5.8
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple Mac OS X Server=10.3.2
Apple Mac OS X Server=10.1.5
Apple Mac OS X Server=10.1
Apple iOS and macOS=10.6.8
Apple Mac OS X Server=10.3.0
Apple iOS and macOS=10.2.5
Apple Mac OS X Server=10.2.2
Apple iOS and macOS=10.6.7
Apple iOS and macOS=10.2.7
Apple iOS and macOS=10.0.2
Apple Mac OS X Server=10.1.1
Apple iOS and macOS=10.2.8
Apple Mac OS X Server=10.2.4
Apple Mac OS X Server=10.2.0
Apple Mac OS X Server=10.5.2
Apple Mac OS X Server=10.4.10
Apple iOS and macOS=10.2.1
Apple iOS and macOS=10.5.6
Apple Mac OS X Server=10.4.9
Apple Mac OS X Server=10.1.2
Apple Mac OS X Server=10.3.7
Apple Mac OS X Server=10.4.11
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.1
Apple Mac OS X Server=10.5.8
Apple iOS and macOS=10.3.5
Apple iOS and macOS=10.3.0
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.6.3
Apple iOS and macOS=10.1
Apple iOS and macOS=10.5.5
Apple Mac OS X Server=10.6.8
Apple Mac OS X Server=10.3.3
Apple Mac OS X Server=10.2.7
Apple Mac OS X Server=10.6.6
Apple iOS and macOS=10.6.3
Apple Mac OS X Server=10.5.5
Apple Mac OS X Server=10.4.4
Apple iOS and macOS=10.5.1
Apple iOS and macOS=10.0.1
Apple iOS and macOS=10.4.10
Apple Mac OS X Server=10.2.3
Apple iOS and macOS=10.0.3
Apple Mac OS X Server=10.4.1
Apple iOS and macOS=10.4.9
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.4.0
Apple Mac OS X Server=10.5.6
Apple Mac OS X Server=10.6.4
Apple iOS and macOS=10.1.4
Apple iOS and macOS<=10.7.1
Apple iOS and macOS=10.2.4
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple Mac OS X Server=10.3.4
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.0
Apple iOS and macOS=10.2.2
Apple iOS and macOS=10.6.6
Apple Mac OS X Server=10.5.0
Apple iOS and macOS=10.0
Apple iOS and macOS=10.3.7
Apple iOS and macOS=10.0.0
Apple Mac OS X Server=10.0.4
Apple iOS and macOS=10.4.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.2.5
Apple Mac OS X Server=10.6.7
Apple iOS and macOS=10.1.0
Apple iOS and macOS=10.1.3
Apple Mac OS X Server=10.6.5
Apple Mac OS X Server=10.4
Apple iOS and macOS=10.5
Apple Mac OS X Server=10.5.4
Apple Mac OS X Server=10.4.5
Apple iOS and macOS=10.3.6
Apple Mac OS X Server=10.3
Apple iOS and macOS=10.5.2
Apple Mac OS X Server=10.3.8
Apple Mac OS X Server=10.7.0
Apple Mac OS X Server=10.5.7
Apple iOS and macOS=10.1.5
Apple Mac OS X Server=10.0.0
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.2.6
Apple Mac OS X Server=10.6.2
Apple iOS and macOS=10.4
Apple iOS and macOS=10.2.0
Apple Mac OS X Server=10.4.6
Apple Mac OS X Server=10.3.9
Apple Mac OS X Server=10.0.3
Apple Mac OS X Server=10.2
Apple Mac OS X Server=10.4.8
Apple iOS and macOS=10.6.1
Apple iOS and macOS=10.4.6
Apple Mac OS X Server=10.6.0
Apple Mac OS X Server=10.1.0
Apple iOS and macOS=10.3.8
Apple iOS and macOS=10.6.0
Apple Mac OS X Server=10.2.1
Apple iOS and macOS=10.1.1
Apple iOS and macOS=10.5.7
Apple Mac OS X Server=10.3.1
Apple iOS and macOS=10.6.2
Apple Mac OS X Server=10.0.2
Apple Mac OS X Server=10.1.4
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.4.11
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.2.6
Apple Mac OS X Server<=10.7.1
Apple iOS and macOS=10.7.0
Apple iOS and macOS=10.2.3
Apple Mac OS X Server=10.5
Apple iOS and macOS=10.6.4
Apple Mac OS X Server=10.4.7
Apple iOS and macOS=10.6.5
Apple Mac OS X Server=10.0.1
Apple Mac OS X Server=10.0
Apple Mac OS X Server=10.2.8
Apple iOS and macOS=10.2
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.5.4
Apple iOS and macOS=10.3
Apple Mac OS X Server=10.3.6
Apple iOS and macOS=10.0.4
Apple Mac OS X Server=10.1.3
Apple iOS and macOS=10.1.2
Event History
Oct 14, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3216?
CVE-2011-3216 is considered a medium severity vulnerability as it allows local users to bypass permissions.
2
How do I fix CVE-2011-3216?
To fix CVE-2011-3216, update your Apple Mac OS X to version 10.7.2 or later.
3
Who is affected by CVE-2011-3216?
CVE-2011-3216 affects Apple Mac OS X versions prior to 10.7.2 and certain Mac OS X Server versions.
4
What kind of attack can exploit CVE-2011-3216?
CVE-2011-3216 can be exploited by local users to delete files they normally do not have permission to delete.
5
Is there a workaround for CVE-2011-3216?
The only reliable workaround for CVE-2011-3216 is to upgrade to a patched version of the operating system.