Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2005-2714

Published: 31/12/2005 Updated: 19/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 10 | Exploitability Score: 3.1
VMScore: 720
Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Subscribe to Apple

Vulnerability Summary

passwd in Directory Services in Mac OS X 10.3.x prior to 10.3.9 and 10.4.x prior to 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x 10.3.3

apple mac os x 10.3.4

apple mac os x 10.4.1

apple mac os x 10.4.2

apple mac os x server 10.3.4

apple mac os x server 10.3.5

apple mac os x server 10.4.2

apple mac os x server 10.4.3

apple mac os x 10.3.5

apple mac os x 10.3.6

apple mac os x 10.4.3

apple mac os x 10.4.4

apple mac os x server 10.3.6

apple mac os x server 10.3.7

apple mac os x server 10.4.4

apple mac os x server 10.4.5

apple mac os x 10.3

apple mac os x 10.3.7

apple mac os x 10.3.8

apple mac os x 10.4.5

apple mac os x server 10.3

apple mac os x server 10.3.1

apple mac os x server 10.3.8

apple mac os x server 10.3.9

apple mac os x 10.3.1

apple mac os x 10.3.2

apple mac os x 10.3.9

apple mac os x 10.4

apple mac os x server 10.3.2

apple mac os x server 10.3.3

apple mac os x server 10.4

apple mac os x server 10.4.1

References

CWE-59http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlhttp://www.securityfocus.com/bid/16907http://secunia.com/advisories/19064http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400http://www.securityfocus.com/bid/16910http://www.osvdb.org/23647http://docs.info.apple.com/article.html?artnum=303382http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlhttp://www.vupen.com/english/advisories/2006/0791https://exchange.xforce.ibmcloud.com/vulnerabilities/25274http://www.securityfocus.com/archive/1/426535/100/0/threadedhttps://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook