CVE-2006-4413 — Apple Remote Desktop vulnerability

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.0%
top 89.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Remote Desktop
Timeline
PublishedNov 18
Latest updateMay 1

Description

Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q78v-f3vf-m3qq: Apple Remote Desktop before 3↗2022-05-01
▶
CVEList
CVE-2006-4413: Apple Remote Desktop before 3↗2006-11-18
▶
CVE-2006-4413 — Apple Remote Desktop vulnerability | cvebase