Vulnerability Details CVE-2005-1725
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.6%
CVSS Severity
CVSS v2 Score 2.1
References
- http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
- http://marc.info/?l=bugtraq&m=111833509424379&w=2
- http://www.suresec.org/advisories/adv3.pdf
- http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
- http://marc.info/?l=bugtraq&m=111833509424379&w=2
- http://www.suresec.org/advisories/adv3.pdf
Products affected by CVE-2005-1725
-
cpe:2.3:o:apple:mac_os_x_server:10.4
-
cpe:2.3:o:apple:mac_os_x_server:10.4.1