2.6
CVE-2006-0388
- EPSS 0.78%
- Veröffentlicht 03.03.2006 22:02:00
- Zuletzt bearbeitet 16.06.2026 22:20:30
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSafari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS X Server Version10.3
Apple ≫ macOS X Server Version10.3.1
Apple ≫ macOS X Server Version10.3.2
Apple ≫ macOS X Server Version10.3.3
Apple ≫ macOS X Server Version10.3.4
Apple ≫ macOS X Server Version10.3.5
Apple ≫ macOS X Server Version10.3.6
Apple ≫ macOS X Server Version10.3.7
Apple ≫ macOS X Server Version10.3.8
Apple ≫ macOS X Server Version10.3.9
Apple ≫ macOS X Server Version10.4
Apple ≫ macOS X Server Version10.4.1
Apple ≫ macOS X Server Version10.4.2
Apple ≫ macOS X Server Version10.4.3
Apple ≫ macOS X Server Version10.4.4
Apple ≫ macOS X Server Version10.4.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.78% | 0.509 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.6 | 1.9 | 4.9 |
AV:L/AC:H/Au:N/C:N/I:P/A:P
|
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
http://secunia.com/advisories/19064
http://www.securityfocus.com/bid/16907
http://www.us-cert.gov/cas/techalerts/TA06-062A.html
http://www.vupen.com/english/advisories/2006/0791
http://securitytracker.com/id?1015713
https://exchange.xforce.ibmcloud.com/vulnerabilities/25038