Lucene search
HistoryMay 04, 2005 - 4:00 a.m.
CVE-2005-1342
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.643 Medium
EPSS
Percentile
97.9%
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
Affected configurations
Node
appleterminalMatch1.4.4
Node
applemac_os_xMatch10.3
ORapplemac_os_xMatch10.3.1
ORapplemac_os_xMatch10.3.2
ORapplemac_os_xMatch10.3.3
ORapplemac_os_xMatch10.3.4
ORapplemac_os_xMatch10.3.5
ORapplemac_os_xMatch10.3.6
ORapplemac_os_xMatch10.3.7
ORapplemac_os_xMatch10.3.8
ORapplemac_os_xMatch10.3.9
Related
cert
cert
Apple Terminal fails to properly sanitize input for "x-man-page" URI
2005-05-06 00:00:00
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2005-1342
2005-05-04 04:00:00
cve
cve
CVE-2005-1342
2005-05-04 04:00:00
securityvulns
securityvulns
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2005-005)
2005-05-03 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.643 Medium
EPSS
Percentile
97.9%
Related for NVD:CVE-2005-1342