CVE-2008-2313
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
01/07/2008
Last modified:
08/08/2017
Description
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
Impact
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
- http://secunia.com/advisories/30802
- http://securitytracker.com/id?1020394=
- http://support.apple.com/kb/HT2163
- http://www.securityfocus.com/bid/30018
- http://www.vupen.com/english/advisories/2008/1981/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43496