Description
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application.
References (5)
Core 5
Core References
US Government Resource third-party-advisory
government-resource
x_refsource_ciac
http://www.ciac.org/ciac/bulletins/p-312.shtml
Various Sources x_refsource_misc
http://www.suresec.org/advisories/adv7.pdf
Vendor Advisory third-party-advisory
x_refsource_auscert
http://www.auscert.org.au/5509
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16920/
Scores
EPSS
0.0034
EPSS Percentile
26.9%
Details
Status
published
Products (4)
apple/mac_os_x
10.3.9
apple/mac_os_x
10.4.2
apple/mac_os_x_server
10.3.9
apple/mac_os_x_server
10.4.2
Published
Oct 25, 2005
Tracked Since
Feb 18, 2026