The Apple File Protocol (AFP) Client fails to properly clean its environment before executing commands. This vulnerability may allow a local attacker execute commands with elevated privileges.
The Apple File Protocol service allows Apple Mac OS clients to access files remotely from a server. According to Apple Security Update 2007-004:
Under certain circumstances, AFP Client may execute commands without properly cleaning the environment. This may allow a local user to create files or execute commands with system
A local attacker may be able to execute commands with elevated privileges.
Apply Updates from Apple
Apple has addressed this vulnerability with the updates included in Apple Security Update 2007-004.
This vulnerability was reported in Apple Security Update 2007-004.
This document was written by Jeff Gennari.
|Date First Published:||2007-04-19|
|Date Last Updated:||2007-04-23 14:53 UTC|