Lucene search

PRIOn knowledge basePRION:CVE-2007-0737

HistoryApr 24, 2007 - 5:19 p.m.

Code injection

2007-04-2417:19:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.5%

JSON

The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors.

CPENameOperatorVersion
mac_os_xeq10.4.3
mac_os_xeq10.4.1
mac_os_xeq10.4.9
mac_os_xeq10.4.7
mac_os_xeq10.4.4
mac_os_xeq10.4
mac_os_xeq10.4.6
mac_os_xeq10.4.5
mac_os_xeq10.3.9
mac_os_xeq10.4.8

Name	Operator	Version
mac_os_x	eq	10.4.3
mac_os_x	eq	10.4.1
mac_os_x	eq	10.4.9
mac_os_x	eq	10.4.7
mac_os_x	eq	10.4.4
mac_os_x	eq	10.4
mac_os_x	eq	10.4.6
mac_os_x	eq	10.4.5
mac_os_x	eq	10.3.9
mac_os_x	eq	10.4.8

Rows per page:

1-10 of 111

References

docs.info.apple.com/article.html?artnum=305391

lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

secunia.com/advisories/24966

www.osvdb.org/34862

www.securityfocus.com/bid/23569

www.securitytracker.com/id?1017939

www.us-cert.gov/cas/techalerts/TA07-109A.html

www.vupen.com/english/advisories/2007/1470

6.1 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.5%

JSON

Related for PRION:CVE-2007-0737