CVE-2005-0125 in Mac OS X

Summary

the "at" commands on mac os x 10.3.7 and earlier do not properly drop privileges which allows local users to (1) delete arbitrary files via atrm (2) execute arbitrary programs via the -f argument to batch or (3) read arbitrary files via the -f argument to batch which generates a job file that is readable by the local user.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 01/20/2005
• Disclosure: 05/02/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-24313
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 9.3
• EPSS: 0.00269
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-0125
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-0125
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-0125/