CVE

Id
23379  
CVE No.
CVE-2007-0022  
Status
Candidate  
Description
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.  
Phase
Assigned (20070102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
225579 23379 CVE-2007-0022 MISC:http://projects.info-pull.com/moab/MOAB-21-01-2007.html  View
225580 23379 CVE-2007-0022 CONFIRM:http://docs.info.apple.com/article.html?artnum=305391  View
225581 23379 CVE-2007-0022 APPLE:APPLE-SA-2007-04-19  View
225582 23379 CVE-2007-0022 URL:http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html  View
225583 23379 CVE-2007-0022 CERT:TA07-109A  View
225584 23379 CVE-2007-0022 URL:http://www.us-cert.gov/cas/techalerts/TA07-109A.html  View
225585 23379 CVE-2007-0022 BID:22148  View
225586 23379 CVE-2007-0022 URL:http://www.securityfocus.com/bid/22148  View
225587 23379 CVE-2007-0022 VUPEN:ADV-2007-1470  View
225588 23379 CVE-2007-0022 URL:http://www.vupen.com/english/advisories/2007/1470  View
225589 23379 CVE-2007-0022 VUPEN:ADV-2007-0074  View
225590 23379 CVE-2007-0022 URL:http://www.vupen.com/english/advisories/2007/0074  View
225591 23379 CVE-2007-0022 OSVDB:31605  View
225592 23379 CVE-2007-0022 URL:http://www.osvdb.org/31605  View
225593 23379 CVE-2007-0022 SECTRACK:1017941  View
225594 23379 CVE-2007-0022 URL:http://www.securitytracker.com/id?1017941  View
225595 23379 CVE-2007-0022 SECUNIA:23793  View
225596 23379 CVE-2007-0022 URL:http://secunia.com/advisories/23793  View
225597 23379 CVE-2007-0022 SECUNIA:24966  View
225598 23379 CVE-2007-0022 URL:http://secunia.com/advisories/24966  View
225599 23379 CVE-2007-0022 XF:macos-writeconfig-privilege-escalation(31677)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51354 JVNDB-2007-000016 Microsoft Internet Explorer の VML による整数オーバーフローの脆弱性 Microsoft Internet Explorer に含まれる Vector Markup Language (VML) の実装 (vgx.dll) には、渡されるデータの境界チェックが適切に行われないため、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-0024 23379 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000016.html  View