CVE-2005-2714

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-2714
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 3.1 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html Patch Vendor Advisory
http://secunia.com/advisories/19064 Patch Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400 Patch Vendor Advisory
http://www.osvdb.org/23647
http://www.securityfocus.com/archive/1/426535/100/0/threaded
http://www.securityfocus.com/bid/16907 Patch Vendor Advisory
http://www.securityfocus.com/bid/16910 Exploit Patch
http://www.us-cert.gov/cas/techalerts/TA06-062A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0791 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25274
http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html Patch Vendor Advisory
http://secunia.com/advisories/19064 Patch Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400 Patch Vendor Advisory
http://www.osvdb.org/23647
http://www.securityfocus.com/archive/1/426535/100/0/threaded
http://www.securityfocus.com/bid/16907 Patch Vendor Advisory
http://www.securityfocus.com/bid/16910 Exploit Patch
http://www.us-cert.gov/cas/techalerts/TA06-062A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0791 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25274
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
History

21 Nov 2024, 00:00

Type Values Removed Values Added
References () http://docs.info.apple.com/article.html?artnum=303382 - () http://docs.info.apple.com/article.html?artnum=303382 -
References () http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - Patch, Vendor Advisory () http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - Patch, Vendor Advisory
References () http://secunia.com/advisories/19064 - Patch, Vendor Advisory () http://secunia.com/advisories/19064 - Patch, Vendor Advisory
References () http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400 - Patch, Vendor Advisory () http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400 - Patch, Vendor Advisory
References () http://www.osvdb.org/23647 - () http://www.osvdb.org/23647 -
References () http://www.securityfocus.com/archive/1/426535/100/0/threaded - () http://www.securityfocus.com/archive/1/426535/100/0/threaded -
References () http://www.securityfocus.com/bid/16907 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/16907 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/16910 - Exploit, Patch () http://www.securityfocus.com/bid/16910 - Exploit, Patch
References () http://www.us-cert.gov/cas/techalerts/TA06-062A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA06-062A.html - US Government Resource
References () http://www.vupen.com/english/advisories/2006/0791 - Vendor Advisory () http://www.vupen.com/english/advisories/2006/0791 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/25274 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/25274 -
Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:00

NVD link : CVE-2005-2714

Mitre link : CVE-2005-2714

CVE.ORG link : CVE-2005-2714

JSON object : View

Products Affected

apple

  • mac_os_x
  • mac_os_x_server
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024