CVE-2003-0490 in Retrospect Client

Resumen

por MITRE

The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2003-06-27
• Divulgación: 2003-08-07
• Moderación: aceptado
• Artículo: VDB-20652
• CPE: listo
• CWE: CWE-269 (confirmado)
• CVSS: 8.4 (VulDB)
• EPSS: 0.00345
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0490
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0490
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0490/