Lucene search

[email protected]CVE-2007-0737

HistoryApr 24, 2007 - 5:19 p.m.

CVE-2007-0737

2007-04-2417:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0737

apple

mac os x

privilege escalation

security vulnerability

6.2 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_xapple mac os xeq10.4.9
apple:mac_os_xapple mac os xeq10.4.7
apple:mac_os_xapple mac os xeq10.4.4
apple:mac_os_xapple mac os xeq10.4
apple:mac_os_xapple mac os xeq10.4.6
apple:mac_os_xapple mac os xeq10.4.5
apple:mac_os_xapple mac os xeq10.3.9
apple:mac_os_xapple mac os xeq10.4.8

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x	apple mac os x	eq	10.4.9
apple:mac_os_x	apple mac os x	eq	10.4.7
apple:mac_os_x	apple mac os x	eq	10.4.4
apple:mac_os_x	apple mac os x	eq	10.4
apple:mac_os_x	apple mac os x	eq	10.4.6
apple:mac_os_x	apple mac os x	eq	10.4.5
apple:mac_os_x	apple mac os x	eq	10.3.9
apple:mac_os_x	apple mac os x	eq	10.4.8

Rows per page:

1-10 of 111

References

docs.info.apple.com/article.html?artnum=305391

lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

secunia.com/advisories/24966

www.osvdb.org/34862

www.securityfocus.com/bid/23569

www.securitytracker.com/id?1017939

www.us-cert.gov/cas/techalerts/TA07-109A.html

www.vupen.com/english/advisories/2007/1470

6.2 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for CVE-2007-0737

prion1 nessus1