EUVD-2006-0647

Malware in sbrugna...

Command injection

Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon...

CVE-2006-0640

Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon...

CVE-2006-0641

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

Design/Logic Flaw

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

CVE-2006-0640

CVE-2006-0640 concerns Orbicule Undercover, where attackers with physical or root access can run a local chmod to change permissions of /private/etc/uc.app/Contents/MacOS/uc. This action disables the protection and prevents the LaunchDaemon service from starting. The NVD entry notes a very low ov...

CVE-2006-0641

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

CVE-2006-0640

Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon...

CVE-2006-0641

Orbicule Undercover is described as using a third‑party web server to determine the IP address through which the computer is accessing the Internet, and this third‑party disclosure is not documented. The result is a potential privacy leak that may transmit sensitive information to an unintended r...