PT-2005-1994 · Apple · Macos X
Bruce Murphy
+1
·
Published
2005-04-22
·
Updated
2009-10-14
·
CVE-2005-0970
CVSS v2.0
7.6
High
| Vector | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mac OS X versions 10.3.9 and earlier
Description
The issue allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design. This may enable attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
Recommendations
For Mac OS X versions 10.3.9 and earlier, consider restricting the execution of setuid/setgid scripts to minimize the risk of exploitation. As a temporary workaround, avoid using setuid/setgid scripts until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Macos X