LMH and Johnny Pwnerseed have reported a security issue in Unsanity Application Enhancer, which can be exploited by malicious, local users to gain escalated privileges.

The problem is caused due to the directory "/Library/Frameworks" being installed with insecure permissions (writable by the "admin" group). This can be exploited e.g. to gain escalated privileges by replacing the "ApplicationEnhancer.framework" directory.

Successful exploitation requires membership to the "admin" group.

The security issue is reported in version 2.0.2 on Mac OS X 10.4.8 on a x86 platform. Other versions may also be affected.

Solution
Add only trusted users to the "admin" group.
Further details available in Customer Area

Provided and/or discovered by
LMH and Johnny Pwnerseed

Changelog
Further details available in Customer Area

Original Advisory
http://projects.info-pull.com/moab/MOAB-08-01-2007.html

Deep Links
Links available in Customer Area