[email protected]CVE-2005-2714

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-2714

2005-12-3105:00:00

CWE-59

[email protected]

web.nvd.nist.gov

cve-2005-2714

overwrite files

symlink attack

mac os x

security vulnerability

6.5 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.8%

JSON

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.3.2
apple:mac_os_x_serverapple mac os x servereq10.3.7
apple:mac_os_x_serverapple mac os x servereq10.3.5
apple:mac_os_xapple mac os xeq10.3.1
apple:mac_os_xapple mac os xeq10.3.5
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_x_serverapple mac os x servereq10.4.2
apple:mac_os_x_serverapple mac os x servereq10.3.3

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.3.2
apple:mac_os_x_server	apple mac os x server	eq	10.3.7
apple:mac_os_x_server	apple mac os x server	eq	10.3.5
apple:mac_os_x	apple mac os x	eq	10.3.1
apple:mac_os_x	apple mac os x	eq	10.3.5
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x_server	apple mac os x server	eq	10.4.2
apple:mac_os_x_server	apple mac os x server	eq	10.3.3

Rows per page:

1-10 of 321

References

docs.info.apple.com/article.html?artnum=303382

lists.apple.com/archives/security-announce/2006/Mar/msg00000.html

secunia.com/advisories/19064

www.idefense.com/intelligence/vulnerabilities/display.php?id=400

www.osvdb.org/23647

www.securityfocus.com/archive/1/426535/100/0/threaded

www.securityfocus.com/bid/16907

www.securityfocus.com/bid/16910

www.us-cert.gov/cas/techalerts/TA06-062A.html

www.vupen.com/english/advisories/2006/0791

exchange.xforce.ibmcloud.com/vulnerabilities/25274

6.5 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.8%

JSON

Related for CVE-2005-2714

securityvulns1 nessus1