CVE-2006-4887

Currently unrated

Key Information:

Vendor
Apple
Status
Apple Remote Desktop
Vendor
CVE Published:
19 September 2006

Summary

Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it.

References

http://www.securityfocus.com/bid/20092
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/446371/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/446751/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.