CVE-2007-4685 | Vulnerability Database | Aqua Security

The kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to gain privileges by executing setuid or setgid programs in which the stdio, stderr, or stdout file descriptors are in an unexpected state.

Affected Software

Name	Vendor	Start Version	End Version
Mac_os_x	Apple	10.4.3	10.4.3
Mac_os_x_server	Apple	10.4.3	10.4.3
Mac_os_x_server	Apple	10.4.10	10.4.10
Mac_os_x_server	Apple	10.4.9	10.4.9
Mac_os_x	Apple	10.4.1	10.4.1
Mac_os_x_server	Apple	10.4.2	10.4.2
Mac_os_x_server	Apple	10.4.4	10.4.4
Mac_os_x	Apple	10.4.10	10.4.10
Mac_os_x_server	Apple	10.4.1	10.4.1
Mac_os_x	Apple	10.4.9	10.4.9
Mac_os_x	Apple	10.4.7	10.4.7
Mac_os_x	Apple	10.4.4	10.4.4
Mac_os_x_server	Apple	10.4.5	10.4.5
Mac_os_x_server	Apple	10.4.6	10.4.6
Mac_os_x_server	Apple	10.4.8	10.4.8
Mac_os_x	Apple	10.4.6	10.4.6
Mac_os_x	Apple	10.4.5	10.4.5
Mac_os_x	Apple	10.4.8	10.4.8
Mac_os_x_server	Apple	10.4.7	10.4.7
Mac_os_x	Apple	10.4.2	10.4.2

References

http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://docs.info.apple.com/article.html?artnum=307041
http://www.us-cert.gov/cas/techalerts/TA07-319A.html
http://www.securityfocus.com/bid/26444
http://securitytracker.com/id?1018950
http://secunia.com/advisories/27643
http://www.vupen.com/english/advisories/2007/3868
https://exchange.xforce.ibmcloud.com/vulnerabilities/38469

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-4685
CWE	https://cwe.mitre.org/data/definitions/264.html