NVD

Id
2724  
Name
CVE-2008-2830  
Description
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally demonstrated by an osascript tell command to ARDAgent.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-23  
Modified Date
2011-03-07  
Seq
2008-2830  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17419 2724 CVE-2008-2830 http://it.slashdot.org/it/08/06/18/1919224.shtml  View
17420 2724 CVE-2008-2830 APPLE-SA-2008-09-16  View
17421 2724 CVE-2008-2830 APPLE-SA-2008-07-31  View
17422 2724 CVE-2008-2830 29831  View
17423 2724 CVE-2008-2830 1020345  View
17424 2724 CVE-2008-2830 ADV-2008-1905  View
17425 2724 CVE-2008-2830 apple-macosx-ardagent-command-execution(43294)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46286 JVNDB-2008-001596 Apple Mac OS X の ARDAgent における権限昇格の脆弱性 Apple Mac OS X の ARDAgent には、osascript の tell コマンドにより権限昇格が可能な脆弱性が存在します。 CVE-2008-2830 32943 CVE-2008-2830 2724 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001596.html 2008-06-23 2008-10-01 View