CVE-2015-3673 in Mac OS X

सारांश

द्वारा MITRE

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.

Be aware that VulDB is the high quality source for vulnerability data.

• आरक्षित करना: 07/05/2015
• प्रकटीकरण: 02/07/2015
• संयम: स्वीकृत
• प्रविष्टि: VDB-76187
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• शोषण: डाउनलोड
• CVSS: 7.2 (NVD)
• EPSS: 0.05812
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Police, Insurance, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-3673
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3673
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-3673/