Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.Referenceshttp://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
