PT-2004-1293 · Apple · Macos X+1

Dave G · Published 2004-03-03 · Updated 2017-10-10 · CVE-2004-0089

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.2.x through 10.3.x

Description A buffer overflow issue in TruBlueEnvironment allows local users to gain privileges via a long environment variable.

Recommendations For Mac OS X versions 10.2.x through 10.3.x, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2004-0089

Affected Products

Macos X

Trublueenvironment

References · 7

• http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0089 · Security Note
• http://securityfocus.com/bid/9509 · Vendor Advisory
• http://atstake.com/research/advisories/2004/a012704-1.txt · Vendor Advisory
• http://kb.cert.org/vuls/id/902374 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14968 · Note
• http://osvdb.org/6821 · Note