Lucene search

MitreCVE-2006-4393

HistoryOct 03, 2006 - 4:02 a.m.

CVE-2006-4393

2006-10-0304:02:00

mitre

web.nvd.nist.gov

apple

mac os x

vulnerability

kerberos tickets

local users

cve-2006-4393

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

Percentile

9.6%

JSON

Unspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User Switching is enabled, allows local users to gain access to Kerberos tickets of other users.

Affected configurations

Nvd

Node

applemac_os_xMatch10.4

applemac_os_xMatch10.4.1

applemac_os_xMatch10.4.2

applemac_os_xMatch10.4.3

applemac_os_xMatch10.4.4

applemac_os_xMatch10.4.5

applemac_os_xMatch10.4.6

applemac_os_xMatch10.4.7

VendorProductVersionCPE
applemac_os_x10.4cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
applemac_os_x10.4.1cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
applemac_os_x10.4.2cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
applemac_os_x10.4.3cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
applemac_os_x10.4.4cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
applemac_os_x10.4.5cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
applemac_os_x10.4.6cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
applemac_os_x10.4.7cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
apple	mac_os_x	10.4.1	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
apple	mac_os_x	10.4.2	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
apple	mac_os_x	10.4.3	cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
apple	mac_os_x	10.4.4	cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
apple	mac_os_x	10.4.5	cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
apple	mac_os_x	10.4.6	cpe:2.3:o:apple:mac_os_x:10.4.6:::::::*
apple	mac_os_x	10.4.7	cpe:2.3:o:apple:mac_os_x:10.4.7:::::::*

References

lists.apple.com/archives/security-announce/2006/Sep/msg00002.html

secunia.com/advisories/22187

securitytracker.com/id?1016959

www.osvdb.org/29271

www.securityfocus.com/bid/20271

www.vupen.com/english/advisories/2006/3852

exchange.xforce.ibmcloud.com/vulnerabilities/29290

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

Percentile

9.6%

JSON

Related for CVE-2006-4393