PT-2001-2540 · Apple · Macos X+1

Published 2001-10-17 · Updated 2017-07-11 · CVE-2001-1447

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetInfo Manager for Mac OS X versions 10.0 through 10.1

Description The issue allows local users to gain root privileges by opening applications using the "recent items" and "services" menus, causing the applications to run with root privileges.

Recommendations For versions 10.0 through 10.1, consider restricting access to the "recent items" and "services" menus to prevent applications from running with root privileges until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-1447

Affected Products

Macos X

Netinfo Manager

References · 7

• 🔥 http://securityfocus.com/bid/3439 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-10/0121.html · Exploit
• 🔥 http://kb.cert.org/vuls/id/945747 · Exploit
• 🔥 http://ciac.org/ciac/bulletins/m-007.shtml · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2001-10/0130.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1447 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7303 · Note