Details of VAR-200506-0224

ID

VAR-200506-0224

CVE

CVE-2005-1722

TITLE

Apple Mac OS X Arbitrary command injection vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200506-145

DESCRIPTION

Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions. Apple has released Security Update 2005-006 to address multiple local and remote Mac OS X vulnerabilities. The following new vulnerabilities were addressed by the security update: - A buffer overflow (CAN-2005-1721) in the AFP (Apple File Protocol) Server. - A vulnerability (CAN-2005-1720) in AFP Server related to temporary ACLs. - A denial of service vulnerability (CAN-2005-1722) in the CoreGraphics component. - A local privilege escalation (CAN-2005-1726) in the CoreGraphics component. - A local race condition vulnerability (CAN-2005-1727) related to permissions on the system cache and Dashboard folders. - A local privilege escalation vulnerability (CAN-2005-1725) in the launch daemon (launchd). - A vulnerability in Launch Services (CAN-2005-1723) could allow files to bypass "safe download" checks. - A vulnerability (CAN-2005-1728) in the MCX Client that may allow local attackers to gain access to Portable Home Directory credentials. - A vulnerability in NFS (CAN-2005-1724) could allow unauthorized access to exported filesystems. These vulnerabilities will be separated into individual BIDs upon further analysis of the issues

Trust: 1.26

sources: NVD: CVE-2005-1722 // BID: 13899 // VULHUB: VHN-12931

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x server	scope:	eq	version:	10.4	Trust: 1.6
vendor:	apple	model:	mac os x	scope:	eq	version:	10.4.1	Trust: 1.6
vendor:	apple	model:	mac os x	scope:	eq	version:	10.4	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.4.1	Trust: 1.6
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.4.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.3.9	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.4.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.4	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.3.9	Trust: 0.3

sources: BID: 13899 // CNNVD: CNNVD-200506-145 // NVD: CVE-2005-1722

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-1722
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200506-145
value:	HIGH
Trust: 0.6
VULHUB:	VHN-12931
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2005-1722
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-12931
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-12931 // CNNVD: CNNVD-200506-145 // NVD: CVE-2005-1722

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-1722

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-200506-145

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-200506-145

EXTERNAL IDS

db:	NVD	id:	CVE-2005-1722	Trust: 2.0
db:	CNNVD	id:	CNNVD-200506-145	Trust: 0.7
db:	APPLE	id:	APPLE-SA-2005-06-08	Trust: 0.6
db:	BID	id:	13899	Trust: 0.3
db:	VULHUB	id:	VHN-12931	Trust: 0.1

sources: VULHUB: VHN-12931 // BID: 13899 // CNNVD: CNNVD-200506-145 // NVD: CVE-2005-1722

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2005/jun/msg00000.html	Trust: 1.7
url:	http://www.apple.com/macosx/	Trust: 0.3
url:	http://www.info.apple.com/usen/security/security_updates.html	Trust: 0.3
url:	http://www.suresec.org/advisories/adv3.pdf	Trust: 0.3
url:	http://www.apple.com	Trust: 0.3
url:	/archive/1/401822	Trust: 0.3

sources: VULHUB: VHN-12931 // BID: 13899 // CNNVD: CNNVD-200506-145 // NVD: CVE-2005-1722

CREDITS

Discovery of the CoreGraphics issue is credited to Chris Evans. Discovery of the folder permissions issue is credited to Michael Haller. Discovery of the launchd issue is credited to Neil Archibald and Ilja Van Sprundel. Other issues were announced by

Trust: 0.6

sources: CNNVD: CNNVD-200506-145

SOURCES

db:	VULHUB	id:	VHN-12931
db:	BID	id:	13899
db:	CNNVD	id:	CNNVD-200506-145
db:	NVD	id:	CVE-2005-1722

LAST UPDATE DATE

2024-08-14T12:47:22.327000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-12931	date:	2008-09-05T00:00:00
db:	BID	id:	13899	date:	2009-07-12T14:56:00
db:	CNNVD	id:	CNNVD-200506-145	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2005-1722	date:	2008-09-05T20:49:54.043

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-12931	date:	2005-06-16T00:00:00
db:	BID	id:	13899	date:	2005-06-08T00:00:00
db:	CNNVD	id:	CNNVD-200506-145	date:	2005-06-16T00:00:00
db:	NVD	id:	CVE-2005-1722	date:	2005-06-16T04:00:00