7.2
CVE-2007-0729
- EPSS 0.89%
- Veröffentlicht 24.04.2007 16:19:00
- Zuletzt bearbeitet 16.06.2026 22:36:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Mac Os X Preview.App Version3.0.8
Apple ≫ macOS X Server Version10.0
Apple ≫ macOS X Server Version10.1
Apple ≫ macOS X Server Version10.1.1
Apple ≫ macOS X Server Version10.1.2
Apple ≫ macOS X Server Version10.1.3
Apple ≫ macOS X Server Version10.1.4
Apple ≫ macOS X Server Version10.1.5
Apple ≫ macOS X Server Version10.2
Apple ≫ macOS X Server Version10.2.1
Apple ≫ macOS X Server Version10.2.2
Apple ≫ macOS X Server Version10.2.3
Apple ≫ macOS X Server Version10.2.4
Apple ≫ macOS X Server Version10.2.5
Apple ≫ macOS X Server Version10.2.6
Apple ≫ macOS X Server Version10.2.7
Apple ≫ macOS X Server Version10.2.8
Apple ≫ macOS X Server Version10.3.9
Apple ≫ macOS X Server Version10.4
Apple ≫ macOS X Server Version10.4.1
Apple ≫ macOS X Server Version10.4.2
Apple ≫ macOS X Server Version10.4.3
Apple ≫ macOS X Server Version10.4.4
Apple ≫ macOS X Server Version10.4.5
Apple ≫ macOS X Server Version10.4.6
Apple ≫ macOS X Server Version10.4.7
Apple ≫ macOS X Server Version10.4.8
Apple ≫ macOS X Server Version10.4.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.89% | 0.545 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://docs.info.apple.com/article.html?artnum=305391
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
http://secunia.com/advisories/24966
http://www.us-cert.gov/cas/techalerts/TA07-109A.html
http://www.vupen.com/english/advisories/2007/1470
http://www.securityfocus.com/bid/23569
http://www.kb.cert.org/vuls/id/312424
http://www.osvdb.org/34858
http://www.securitytracker.com/id?1017944