CVE-2006-4887

published 2006-09-19

CVE-2006-4887: Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
apple	apple_remote_desktop	—	—
apple	apple_remote_desktop	—	—
apple	apple_remote_desktop	—	—
apple	mac_os_x	<= 10.2.8	—