CVE-2005-0712

2005-05-0204:00:00

mitre

web.nvd.nist.gov

cve-2005-0712

mac os x

security vulnerability

world-writable permissions

local users

privilege escalation

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.

Affected configurations

Nvd

Node

applemac_os_xMatch10.1

applemac_os_xMatch10.2

applemac_os_xMatch10.3.4

VendorProductVersionCPE
applemac_os_x10.1cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*
applemac_os_x10.2cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*
applemac_os_x10.3.4cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.1	cpe:2.3:o:apple:mac_os_x:10.1:::::::*
apple	mac_os_x	10.2	cpe:2.3:o:apple:mac_os_x:10.2:::::::*
apple	mac_os_x	10.3.4	cpe:2.3:o:apple:mac_os_x:10.3.4:::::::*