7.2
CVE-2007-0729
- EPSS 0.89%
- Veröffentlicht 24.04.2007 16:19:00
- Zuletzt bearbeitet 16.06.2026 22:36:09
- Erkennungen
Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Mac Os X Preview.App Version 3.0.8
Apple ≫ macOS X Server Version 10.0
Apple ≫ macOS X Server Version 10.1
Apple ≫ macOS X Server Version 10.1.1
Apple ≫ macOS X Server Version 10.1.2
Apple ≫ macOS X Server Version 10.1.3
Apple ≫ macOS X Server Version 10.1.4
Apple ≫ macOS X Server Version 10.1.5
Apple ≫ macOS X Server Version 10.2
Apple ≫ macOS X Server Version 10.2.1
Apple ≫ macOS X Server Version 10.2.2
Apple ≫ macOS X Server Version 10.2.3
Apple ≫ macOS X Server Version 10.2.4
Apple ≫ macOS X Server Version 10.2.5
Apple ≫ macOS X Server Version 10.2.6
Apple ≫ macOS X Server Version 10.2.7
Apple ≫ macOS X Server Version 10.2.8
Apple ≫ macOS X Server Version 10.3.9
Apple ≫ macOS X Server Version 10.4
Apple ≫ macOS X Server Version 10.4.1
Apple ≫ macOS X Server Version 10.4.2
Apple ≫ macOS X Server Version 10.4.3
Apple ≫ macOS X Server Version 10.4.4
Apple ≫ macOS X Server Version 10.4.5
Apple ≫ macOS X Server Version 10.4.6
Apple ≫ macOS X Server Version 10.4.7
Apple ≫ macOS X Server Version 10.4.8
Apple ≫ macOS X Server Version 10.4.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.89% | 0.545 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://docs.info.apple.com/article.html?artnum=305391
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
http://secunia.com/advisories/24966
http://www.us-cert.gov/cas/techalerts/TA07-109A.html
http://www.vupen.com/english/advisories/2007/1470
http://www.securityfocus.com/bid/23569
http://www.kb.cert.org/vuls/id/312424
http://www.osvdb.org/34858
http://www.securitytracker.com/id?1017944