full-disclosure - -ADVISORY- + [Thu Mar 16 13:41:45 EST 2006] + Local Privilege Escalation Vulnerability in Apple iTunes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060316184151.CFD822C4F@lists.grok.org.uk>
Date: Thu Mar 16 19:35:58 2006
From: sikurezza at nexlab.it (sikurezza@...lab.it)
Subject: -ADVISORY- + [Thu Mar 16 13:41:45 EST 2006] +
	Local Privilege Escalation Vulnerability in Apple iTunes

-ADVISORY- + [Thu Mar 16 13:41:45 EST 2006] + Local Privilege Escalation Vulnerability in Apple iTunes

8=======D~~~~~~~~~~
[+] DESCRIPTION
8=======D~~~~~~~~~~
Apple iTunes incorrectly validates user input, making privilege escalation possible.

8=======D~~~~~~~~~~
[+] WORKAROUND
8=======D~~~~~~~~~~
This vulnerability had no workarounds.
8=======D~~~~~~~~~~
[+] VENDOR RESPONSE
8=======D~~~~~~~~~~
Apple iTunes is offered no identified commentary regarding this problem at hand.
8=======D~~~~~~~~~~
APPENDIX A VENDOR INFORMATION
8=======D~~~~~~~~~~
http://www.apple.com/itunes/

8=======D~~~~~~~~~~
CONTACT
8=======D~~~~~~~~~~
sikurezza@...lab.it sikurezza@...lab.it

GSAE CCE CEH CSFA SSP-CNSA GIPS GHTQ CAP