CVE-2005-2714 — Link Following in Apple MAC OS X

CWE-59 — Link Following2 documents2 sources
Severity
6.8MEDIUMNVD
EPSS
0.0%
top 93.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedDec 31
Latest updateMay 1

Description

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.1 | Impact: 10.0

Affected Packages2 packages

▶NVDapple/mac_os_x16 versions+15
▶NVDapple/mac_os_x_server16 versions+15

Patches

Patch: lists.apple.com ↗Patch: secunia.com ↗Patch: www.idefense.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-qv5p-hrcr-mvx8: passwd in Directory Services in Mac OS X 10↗2022-05-01
▶