← back
CVE-2005-2713

CVE-2005-2713

EPSS 1.0%
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1545unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://docs.info.apple.com/article.html?artnum=303382http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlhttp://secunia.com/advisories/19064https://exchange.xforce.ibmcloud.com/vulnerabilities/25272http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400http://www.osvdb.org/23646http://www.securityfocus.com/archive/1/426535/100/0/threadedhttp://www.securityfocus.com/bid/16907http://www.securityfocus.com/bid/16910http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlhttp://www.vupen.com/english/advisories/2006/0791