PT-2005-2337 · Apple · Macos X

Published 2005-05-04 · Updated 2008-09-05 · CVE-2005-1335

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X version 10.3.9

Description: A local privilege escalation issue exists due to the insecure use of external helper programs by certain commands. Specifically, the commands chfn, chpass, and chsh are affected. This allows local users to gain elevated privileges.

Recommendations: For Mac OS X version 10.3.9, consider restricting access to the chfn, chpass, and chsh commands until a fix is available. As a temporary workaround, avoid using these commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-1335

Affected Products

Macos X

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1335 · Security Note
• http://lists.apple.com/archives/security-announce/2005/May/msg00001.html · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA05-136A.html · Note
• http://kb.cert.org/vuls/id/331694 · Note