Lucene search

[email protected]CVE-2004-0824

HistoryApr 14, 2005 - 4:00 a.m.

CVE-2004-0824

2005-04-1404:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0824

pppdialer

mac os x

symlink attack

system files

vulnerability

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files.

Affected configurations

NVD

Node

applemac_os_xMatch10.2.8

applemac_os_xMatch10.3

applemac_os_xMatch10.3.1

applemac_os_xMatch10.3.2

applemac_os_xMatch10.3.3

applemac_os_xMatch10.3.4

applemac_os_xMatch10.3.5

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.2.8
apple:mac_os_xapple mac os xeq10.3
apple:mac_os_xapple mac os xeq10.3.1
apple:mac_os_xapple mac os xeq10.3.2
apple:mac_os_xapple mac os xeq10.3.3
apple:mac_os_xapple mac os xeq10.3.4
apple:mac_os_xapple mac os xeq10.3.5

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.2.8
apple:mac_os_x	apple mac os x	eq	10.3
apple:mac_os_x	apple mac os x	eq	10.3.1
apple:mac_os_x	apple mac os x	eq	10.3.2
apple:mac_os_x	apple mac os x	eq	10.3.3
apple:mac_os_x	apple mac os x	eq	10.3.4
apple:mac_os_x	apple mac os x	eq	10.3.5

References

securitytracker.com/id?1011175

www.auscert.org.au/render.html?it=4363

www.ciac.org/ciac/bulletins/o-212.shtml

www.securityfocus.com/advisories/7148

www.securityfocus.com/bid/11139

exchange.xforce.ibmcloud.com/vulnerabilities/17298

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2004-0824

nvd1 cvelist1 nessus1