PT-2001-2540 · Apple · Macos X+1

Publicado 2001-10-17 · Atualizado 2017-07-11 · CVE-2001-1447

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetInfo Manager for Mac OS X versions 10.0 through 10.1

Description The issue allows local users to gain root privileges by opening applications using the "recent items" and "services" menus, causing the applications to run with root privileges.

Recommendations For versions 10.0 through 10.1, consider restricting access to the "recent items" and "services" menus to prevent applications from running with root privileges until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-1447

Produtos afetados

Macos X

Netinfo Manager

Referências · 7

• 🔥 http://securityfocus.com/bid/3439 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-10/0121.html · Exploit
• 🔥 http://kb.cert.org/vuls/id/945747 · Exploit
• 🔥 http://ciac.org/ciac/bulletins/m-007.shtml · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2001-10/0130.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7303 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1447 · Nota de Segurança