Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.6
CVSSv2

CVE-2006-1471

Published: 27/06/2006 Updated: 18/10/2018
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Apple

Vulnerability Summary

Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x 10.4.5

apple mac os x 10.4.6

apple mac os x server 10.4.6

apple mac os x 10.4.3

apple mac os x 10.4.4

apple mac os x server 10.4.4

apple mac os x server 10.4.5

apple mac os x 10.4

apple mac os x server 10.4

apple mac os x server 10.4.1

apple mac os x 10.4.1

apple mac os x 10.4.2

apple mac os x server 10.4.2

apple mac os x server 10.4.3

Recent Articles

Kaspersky Security Bulletin 2006: Malware for Unix-type systems
Securelist • Konstantin Sapronov • 27 Feb 2007

In spite of their variety, all contemporary operating systems can be divided into two broad categories: Microsoft operating systems and Unix-type systems. This report provides an overview of malicious programs for Unix-type operating systems. Linux is the most popular Unix-type system, and even though it is the main alternative to Windows, it is still predominantly used for server solutions. Like other Unix-type systems, Linux workstations are used by only a handful of enthusiasts and profession...

Read more...

References

CWE-134http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.htmlhttp://www.securityfocus.com/bid/18686http://securitytracker.com/id?1016397http://www.securityfocus.com/bid/18724http://secunia.com/advisories/20877http://www.osvdb.org/26933http://www.vupen.com/english/advisories/2006/2566https://exchange.xforce.ibmcloud.com/vulnerabilities/27479http://www.securityfocus.com/archive/1/438699/100/0/threadedhttps://nvd.nist.govhttps://securelist.com/kaspersky-security-bulletin-2006-malware-for-unix-type-systems/36131/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook