ID

VAR-200212-0020


CVE

CVE-2002-1266


TITLE

Mac OS X Permissions and Access Control Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200212-003

DESCRIPTION

Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File.". Mac OS X is prone to a local security vulnerability

Trust: 1.26

sources: NVD: CVE-2002-1266 // BID: 89536 // VULHUB: VHN-5651

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:eqversion:10.2.2

Trust: 1.6

vendor:applemodel:mac osscope:eqversion:x10.2.2

Trust: 0.3

sources: BID: 89536 // CNNVD: CNNVD-200212-003 // NVD: CVE-2002-1266

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2002-1266
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200212-003
value: MEDIUM

Trust: 0.6

VULHUB: VHN-5651
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2002-1266
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-5651
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-5651 // CNNVD: CNNVD-200212-003 // NVD: CVE-2002-1266

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2002-1266

THREAT TYPE

local

Trust: 0.9

sources: BID: 89536 // CNNVD: CNNVD-200212-003

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200212-003

EXTERNAL IDS

db:NVDid:CVE-2002-1266

Trust: 2.0

db:OSVDBid:7057

Trust: 1.7

db:XFid:10818

Trust: 0.9

db:CNNVDid:CNNVD-200212-003

Trust: 0.7

db:BIDid:89536

Trust: 0.4

db:VULHUBid:VHN-5651

Trust: 0.1

sources: VULHUB: VHN-5651 // BID: 89536 // CNNVD: CNNVD-200212-003 // NVD: CVE-2002-1266

REFERENCES

url:http://www.info.apple.com/usen/security/security_updates.html

Trust: 2.0

url:http://www.osvdb.org/7057

Trust: 1.7

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/10818

Trust: 1.1

url:http://xforce.iss.net/xforce/xfdb/10818

Trust: 0.9

sources: VULHUB: VHN-5651 // BID: 89536 // CNNVD: CNNVD-200212-003 // NVD: CVE-2002-1266

CREDITS

Unknown

Trust: 0.3

sources: BID: 89536

SOURCES

db:VULHUBid:VHN-5651
db:BIDid:89536
db:CNNVDid:CNNVD-200212-003
db:NVDid:CVE-2002-1266

LAST UPDATE DATE

2024-08-14T14:42:24.247000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-5651date:2017-10-10T00:00:00
db:BIDid:89536date:2002-12-11T00:00:00
db:CNNVDid:CNNVD-200212-003date:2005-10-12T00:00:00
db:NVDid:CVE-2002-1266date:2017-10-10T01:30:10.220

SOURCES RELEASE DATE

db:VULHUBid:VHN-5651date:2002-12-11T00:00:00
db:BIDid:89536date:2002-12-11T00:00:00
db:CNNVDid:CNNVD-200212-003date:2002-12-11T00:00:00
db:NVDid:CVE-2002-1266date:2002-12-11T05:00:00