CVE

Id
20500  
CVE No.
CVE-2006-4396  
Status
Candidate  
Description
The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack.  
Phase
Assigned (20060828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
192305 20500 CVE-2006-4396 CONFIRM:http://docs.info.apple.com/article.html?artnum=304829  View
192306 20500 CVE-2006-4396 APPLE:APPLE-SA-2006-11-28  View
192307 20500 CVE-2006-4396 URL:http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html  View
192308 20500 CVE-2006-4396 CERT:TA06-333A  View
192309 20500 CVE-2006-4396 URL:http://www.us-cert.gov/cas/techalerts/TA06-333A.html  View
192310 20500 CVE-2006-4396 CERT-VN:VU#323424  View
192311 20500 CVE-2006-4396 URL:http://www.kb.cert.org/vuls/id/323424  View
192312 20500 CVE-2006-4396 BID:21335  View
192313 20500 CVE-2006-4396 URL:http://www.securityfocus.com/bid/21335  View
192314 20500 CVE-2006-4396 VUPEN:ADV-2006-4750  View
192315 20500 CVE-2006-4396 URL:http://www.vupen.com/english/advisories/2006/4750  View
192316 20500 CVE-2006-4396 OSVDB:30739  View
192317 20500 CVE-2006-4396 URL:http://www.osvdb.org/30739  View
192318 20500 CVE-2006-4396 SECTRACK:1017301  View
192319 20500 CVE-2006-4396 URL:http://securitytracker.com/id?1017301  View
192320 20500 CVE-2006-4396 SECUNIA:23155  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58882 JVNDB-2006-001148 Mac OS X の ATS サーバにおけるバッファオーバーフローの脆弱性 Mac OS X の Apple Type Services (ATS) サーバには、バッファオーバーフローの脆弱性が存在します。 CVE-2006-4398 20500 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001148.html  View