PT-2006-6493 · Parallels · Parallels Desktop For Mac

Publicado 2006-11-08 · Atualizado 2008-09-05 · CVE-2006-5817

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Parallels Desktop for Mac Build 1940

Description: The issue concerns insecure permissions used by prl dhcpd in Parallels Desktop for Mac. Specifically, it uses permissions of 0666 for the /Library/Parallels/.dhcpd configuration file, allowing local users to modify the DHCP configuration.

Recommendations: For Parallels Desktop for Mac Build 1940, consider changing the permissions of the /Library/Parallels/.dhcpd configuration file to prevent local users from modifying the DHCP configuration. As a temporary workaround, restrict access to the .dhcpd configuration file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-5817

Produtos afetados

Parallels Desktop For Mac

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-5817 · Nota de Segurança
• http://secunia.com/advisories/22634 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0582.html · Nota