CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: xnu 1228.9.59 and earlier on apple mac os x 10.5.6 and earlier does not properly restrict interaction between user space and the hfs ioctl handler, which allows local users to overwrite kernel memory and gain privileges by attaching an hfs+ disk image and performing certain steps involving hfs_get_boot_info fcntl calls.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-04-02
Last Modified Date: 2017-09-29