Lucene search

[email protected]CVE-2007-0729

HistoryApr 24, 2007 - 4:19 p.m.

CVE-2007-0729

2007-04-2416:19:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2007-0729

apple mac os x

afp

privilege escalation

security vulnerability

6.2 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.1.5
apple:mac_os_x_serverapple mac os x servereq10.1
apple:mac_os_xapple mac os xeq10.2.5
apple:mac_os_x_serverapple mac os x servereq10.2.2
apple:mac_os_xapple mac os xeq10.2.7
apple:mac_os_xapple mac os xeq10.0.2
apple:mac_os_x_serverapple mac os x servereq10.1.1
apple:mac_os_xapple mac os xeq10.2.8

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.1.5
apple:mac_os_x_server	apple mac os x server	eq	10.1
apple:mac_os_x	apple mac os x	eq	10.2.5
apple:mac_os_x_server	apple mac os x server	eq	10.2.2
apple:mac_os_x	apple mac os x	eq	10.2.7
apple:mac_os_x	apple mac os x	eq	10.0.2
apple:mac_os_x_server	apple mac os x server	eq	10.1.1
apple:mac_os_x	apple mac os x	eq	10.2.8

Rows per page:

1-10 of 681

References

docs.info.apple.com/article.html?artnum=305391

lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

secunia.com/advisories/24966

www.kb.cert.org/vuls/id/312424

www.osvdb.org/34858

www.securityfocus.com/bid/23569

www.securitytracker.com/id?1017944

www.us-cert.gov/cas/techalerts/TA07-109A.html

www.vupen.com/english/advisories/2007/1470

6.2 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2007-0729

cert1 prion1 nessus1