NVD

Id
52691  
Name
CVE-2007-0467  
Description
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-30  
Modified Date
2011-03-07  
Seq
2007-0467  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266303 52691 CVE-2007-0467 http://docs.info.apple.com/article.html?artnum=305214  View
266304 52691 CVE-2007-0467 APPLE-SA-2007-03-13  View
266305 52691 CVE-2007-0467 http://projects.info-pull.com/moab/MOAB-28-01-2007.html  View
266306 52691 CVE-2007-0467 VU#363112  View
266307 52691 CVE-2007-0467 1017751  View
266308 52691 CVE-2007-0467 TA07-072A  View
266309 52691 CVE-2007-0467 ADV-2007-0930  View
266310 52691 CVE-2007-0467 macos-crashreporterd-privilege-escalation(31888)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51540 JVNDB-2007-000202 Apple Mac OS X の Crash Reporter に関するシンボリックリンク攻撃を受ける脆弱性 Apple Mac OS X の Crash Reporter には、/Library/Logs/CrashReporter/ 内のアプリケーションログを利用してのシンボリックリンク攻撃により、任意のファイルを変更される、あるいは権限昇格を許してしまう脆弱性が存在します。 CVE-2007-0467 23822 CVE-2007-0467 52691 6.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000202.html 2007-01-28 2007-04-20 View