Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2006-4392 — Openstep vulnerability
4 documents3 sources
Severity
7.2HIGHNVD
EPSS
1.0%
top 22.85%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedOct 3
Latest updateMay 1
Description
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.
CVSS vector
AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0
Affected Packages2 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-2h8f-c5j4-6pq8: The Mach kernel, as used in operating systems including (1) Mac OS X 10↗2022-05-01