7.2

CVE-2007-0729

Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
ApplemacOS X Version10.0
ApplemacOS X Version10.0.1
ApplemacOS X Version10.0.2
ApplemacOS X Version10.0.3
ApplemacOS X Version10.0.4
ApplemacOS X Version10.1
ApplemacOS X Version10.1.1
ApplemacOS X Version10.1.2
ApplemacOS X Version10.1.3
ApplemacOS X Version10.1.4
ApplemacOS X Version10.1.5
ApplemacOS X Version10.2
ApplemacOS X Version10.2.1
ApplemacOS X Version10.2.2
ApplemacOS X Version10.2.3
ApplemacOS X Version10.2.4
ApplemacOS X Version10.2.5
ApplemacOS X Version10.2.6
ApplemacOS X Version10.2.7
ApplemacOS X Version10.2.8
ApplemacOS X Version10.3
ApplemacOS X Version10.3.1
ApplemacOS X Version10.3.2
ApplemacOS X Version10.3.3
ApplemacOS X Version10.3.4
ApplemacOS X Version10.3.5
ApplemacOS X Version10.3.6
ApplemacOS X Version10.3.7
ApplemacOS X Version10.3.8
ApplemacOS X Version10.3.9
ApplemacOS X Version10.4
ApplemacOS X Version10.4.1
ApplemacOS X Version10.4.2
ApplemacOS X Version10.4.3
ApplemacOS X Version10.4.4
ApplemacOS X Version10.4.5
ApplemacOS X Version10.4.6
ApplemacOS X Version10.4.7
ApplemacOS X Version10.4.8
ApplemacOS X Version10.4.9
AppleMac Os X Preview.App Version3.0.8
ApplemacOS X Server Version10.0
ApplemacOS X Server Version10.1
ApplemacOS X Server Version10.1.1
ApplemacOS X Server Version10.1.2
ApplemacOS X Server Version10.1.3
ApplemacOS X Server Version10.1.4
ApplemacOS X Server Version10.1.5
ApplemacOS X Server Version10.2
ApplemacOS X Server Version10.2.1
ApplemacOS X Server Version10.2.2
ApplemacOS X Server Version10.2.3
ApplemacOS X Server Version10.2.4
ApplemacOS X Server Version10.2.5
ApplemacOS X Server Version10.2.6
ApplemacOS X Server Version10.2.7
ApplemacOS X Server Version10.2.8
ApplemacOS X Server Version10.3.9
ApplemacOS X Server Version10.4
ApplemacOS X Server Version10.4.1
ApplemacOS X Server Version10.4.2
ApplemacOS X Server Version10.4.3
ApplemacOS X Server Version10.4.4
ApplemacOS X Server Version10.4.5
ApplemacOS X Server Version10.4.6
ApplemacOS X Server Version10.4.7
ApplemacOS X Server Version10.4.8
ApplemacOS X Server Version10.4.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.89% 0.545
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://docs.info.apple.com/article.html?artnum=305391
Patch
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
http://secunia.com/advisories/24966
http://www.us-cert.gov/cas/techalerts/TA07-109A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/1470
http://www.securityfocus.com/bid/23569
http://www.kb.cert.org/vuls/id/312424
Third Party Advisory
US Government Resource
http://www.osvdb.org/34858
http://www.securitytracker.com/id?1017944