7.2
CVSSv2

CVE-2005-0716

Published: 21/03/2005 Updated: 05/09/2008
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 730
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x 10.3.1

apple mac os x 10.3.3

apple mac os x 10.3.5

apple mac os x server 10.3.1

apple mac os x server 10.3.3

apple mac os x 10.3

apple mac os x server 10.3.5

apple mac os x server 10.3.6

apple mac os x 10.3.6

apple mac os x 10.3.7

apple mac os x 10.3.8

apple mac os x server 10.3

apple mac os x 10.3.2

apple mac os x 10.3.4

apple mac os x server 10.3.2

apple mac os x server 10.3.4

Exploits

/*[ MacOS X[CF_CHARSET_PATH]: local root exploit ]********* * * * by: v9@fakehalous (fakehalo/realhalo) * * * * found by: iDefense (anon finder) * * ...
#!/usr/bin/perl # # wwwdigitalmunitioncom # written by kf (kf_lists[at]digitalmunition[dot]com) # # Variant of CF_CHARSET_PATH a local root exploit by v9_at_fakehalous # # I was in the mood for some retro shit this morning, and I need root on some old ass G3 iMacs for a demo # # I got sick of pressing enter on v9's exploit It gets in th ...

Recent Articles

Kaspersky Security Bulletin 2006: Malware for Unix-type systems
Securelist • Konstantin Sapronov • 27 Feb 2007

In spite of their variety, all contemporary operating systems can be divided into two broad categories: Microsoft operating systems and Unix-type systems. This report provides an overview of malicious programs for Unix-type operating systems. Linux is the most popular Unix-type system, and even though it is the main alternative to Windows, it is still predominantly used for server solutions. Like other Unix-type systems, Linux workstations are used by only a handful of enthusiasts and profession...