Lucene search

[email protected]CVE-2003-0088

HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0088

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

trublueenvironment

macos

cve-2003-0088

privilege escalation

security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.

Affected configurations

NVD

Node

applemac_os_xMatch10.2

applemac_os_xMatch10.2.1

applemac_os_xMatch10.2.2

applemac_os_xMatch10.2.3

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.2
apple:mac_os_xapple mac os xeq10.2.1
apple:mac_os_xapple mac os xeq10.2.2
apple:mac_os_xapple mac os xeq10.2.3

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.2
apple:mac_os_x	apple mac os x	eq	10.2.1
apple:mac_os_x	apple mac os x	eq	10.2.2
apple:mac_os_x	apple mac os x	eq	10.2.3

References

docs.info.apple.com/article.html?artnum=61798

lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt

www.atstake.com/research/advisories/2003/a021403-1.txt

www.iss.net/security_center/static/11332.php

www.securityfocus.com/bid/6859

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2003-0088

securityvulns1 cvelist1 nvd1 cert1