CNVD-2015-03984

Vulnerability from cnvd - Published: 2015-06-25
VLAI Severity ?
Title
Apple OS X Keychain/WebSocket/Sandbox ACL存在多个漏洞
Description
Apple Mac OS X是一个苹果设备的操作系统。 Apple OS X Keychain/WebSocket/Sandbox ACL存在多个漏洞。 1）远程用户可创建一个应用程序，由目标用户安装时，可访问目标应用的keychain项，删除keychain项，然后创建新的特殊的，其属性和删除项一样的keychain项。然后目标用户之后可更新目标应用的验证凭据，远程用户的应用程序可通过新keychain来更新验证凭据。2）由于操作系统未能提供WebSockets的验证，远程用户可创建应用然后由目标用户安装和加载，可访问任意WebSockets端口，获取使用该端口的目标应用的敏感信息。 3）远程用户可创建一个包含已存在目标应用的特制的bundle ID帮助应用的应用包，当目标用户运行应用程序时，操作系统会授权该应用访问目标应用程序ACL及目标应用程序的沙盒。
Severity
中
Formal description

目前没有详细解决方案提供： http://www.apple.com/

Reference
https://sites.google.com/site/xaraflaws/ http://arxiv.org/pdf/1505.06836.pdf
Impacted products
Name
Apple OS X
Show details on source website
To clipboard 

{
  "description": "Apple Mac OS X\u662f\u4e00\u4e2a\u82f9\u679c\u8bbe\u5907\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nApple OS X Keychain/WebSocket/Sandbox ACL\u5b58\u5728\u591a\u4e2a\u6f0f\u6d1e\u3002\r\n1\uff09\u8fdc\u7a0b\u7528\u6237\u53ef\u521b\u5efa\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\uff0c\u7531\u76ee\u6807\u7528\u6237\u5b89\u88c5\u65f6\uff0c\u53ef\u8bbf\u95ee\u76ee\u6807\u5e94\u7528\u7684keychain\u9879\uff0c\u5220\u9664keychain\u9879\uff0c\u7136\u540e\u521b\u5efa\u65b0\u7684\u7279\u6b8a\u7684\uff0c\u5176\u5c5e\u6027\u548c\u5220\u9664\u9879\u4e00\u6837\u7684keychain\u9879\u3002\u7136\u540e\u76ee\u6807\u7528\u6237\u4e4b\u540e\u53ef\u66f4\u65b0\u76ee\u6807\u5e94\u7528\u7684\u9a8c\u8bc1\u51ed\u636e\uff0c\u8fdc\u7a0b\u7528\u6237\u7684\u5e94\u7528\u7a0b\u5e8f\u53ef\u901a\u8fc7\u65b0keychain\u6765\u66f4\u65b0\u9a8c\u8bc1\u51ed\u636e\u30022\uff09\u7531\u4e8e\u64cd\u4f5c\u7cfb\u7edf\u672a\u80fd\u63d0\u4f9bWebSockets\u7684\u9a8c\u8bc1\uff0c\u8fdc\u7a0b\u7528\u6237\u53ef\u521b\u5efa\u5e94\u7528\u7136\u540e\u7531\u76ee\u6807\u7528\u6237\u5b89\u88c5\u548c\u52a0\u8f7d\uff0c\u53ef\u8bbf\u95ee\u4efb\u610fWebSockets\u7aef\u53e3\uff0c\u83b7\u53d6\u4f7f\u7528\u8be5\u7aef\u53e3\u7684\u76ee\u6807\u5e94\u7528\u7684\u654f\u611f\u4fe1\u606f\u3002\r\n3\uff09\u8fdc\u7a0b\u7528\u6237\u53ef\u521b\u5efa\u4e00\u4e2a\u5305\u542b\u5df2\u5b58\u5728\u76ee\u6807\u5e94\u7528\u7684\u7279\u5236\u7684bundle ID\u5e2e\u52a9\u5e94\u7528\u7684\u5e94\u7528\u5305\uff0c\u5f53\u76ee\u6807\u7528\u6237\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f\u65f6\uff0c\u64cd\u4f5c\u7cfb\u7edf\u4f1a\u6388\u6743\u8be5\u5e94\u7528\u8bbf\u95ee\u76ee\u6807\u5e94\u7528\u7a0b\u5e8fACL\u53ca\u76ee\u6807\u5e94\u7528\u7a0b\u5e8f\u7684\u6c99\u76d2\u3002",
  "discovererName": "Apple",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttp://www.apple.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-03984",
  "openTime": "2015-06-25",
  "products": {
    "product": "Apple OS X"
  },
  "referenceLink": "https://sites.google.com/site/xaraflaws/\r\nhttp://arxiv.org/pdf/1505.06836.pdf",
  "serverity": "\u4e2d",
  "submitTime": "2015-06-23",
  "title": "Apple OS X Keychain/WebSocket/Sandbox ACL\u5b58\u5728\u591a\u4e2a\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.