Lucene search

[email protected]CVE-2005-2713

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-2713

2005-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2713

directory services

mac os x

local users

world-writable files

root

password database option

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.7%

JSON

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.3.2
apple:mac_os_x_serverapple mac os x servereq10.3.7
apple:mac_os_x_serverapple mac os x servereq10.3.5
apple:mac_os_xapple mac os xeq10.3.1
apple:mac_os_xapple mac os xeq10.3.5
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_x_serverapple mac os x servereq10.4.2
apple:mac_os_x_serverapple mac os x servereq10.3.3

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.3.2
apple:mac_os_x_server	apple mac os x server	eq	10.3.7
apple:mac_os_x_server	apple mac os x server	eq	10.3.5
apple:mac_os_x	apple mac os x	eq	10.3.1
apple:mac_os_x	apple mac os x	eq	10.3.5
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x_server	apple mac os x server	eq	10.4.2
apple:mac_os_x_server	apple mac os x server	eq	10.3.3

Rows per page:

1-10 of 321

References

docs.info.apple.com/article.html?artnum=303382

lists.apple.com/archives/security-announce/2006/Mar/msg00000.html

secunia.com/advisories/19064

www.idefense.com/intelligence/vulnerabilities/display.php?id=400

www.osvdb.org/23646

www.securityfocus.com/archive/1/426535/100/0/threaded

www.securityfocus.com/bid/16907

www.securityfocus.com/bid/16910

www.us-cert.gov/cas/techalerts/TA06-062A.html

www.vupen.com/english/advisories/2006/0791

exchange.xforce.ibmcloud.com/vulnerabilities/25272

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.7%

JSON

Related for CVE-2005-2713

securityvulns1 nessus1