SecuritySpace - CVE-2011-1516

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2011-1516

Description: The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-1516
Bugtraq: 20111110 CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass (Google Search)
http://www.securityfocus.com/archive/1/520479/100/100/threaded
http://www.coresecurity.com/content/apple-osx-sandbox-bypass

CVE ID:	CVE-2011-1516
Description:	The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1516 Bugtraq: 20111110 CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass (Google Search) http://www.securityfocus.com/archive/1/520479/100/100/threaded http://www.coresecurity.com/content/apple-osx-sandbox-bypass