Lucene search

PRIOn knowledge basePRION:CVE-2006-1457

HistoryMay 12, 2006 - 9:02 p.m.

Design/Logic Flaw

2006-05-1221:02:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Safari on Apple Mac OS X 10.4.6, when “Open `safe’ files after downloading” is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.

CPENameOperatorVersion
mac_os_xeq10.4.6
mac_os_x_servereq10.4.6

CPE	Name	Operator	Version
	mac_os_x	eq	10.4.6
	mac_os_x_server	eq	10.4.6

References

lists.apple.com/archives/security-announce/2006/May/msg00003.html

secunia.com/advisories/20077

securitytracker.com/id?1016069

www.kb.cert.org/vuls/id/519473

www.osvdb.org/25598

www.securityfocus.com/bid/17951

www.us-cert.gov/cas/techalerts/TA06-132A.html

www.vupen.com/english/advisories/2006/1779

exchange.xforce.ibmcloud.com/vulnerabilities/26427

6.5 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for PRION:CVE-2006-1457