high7.2Public exploit code
CVE-2003-0171
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary comman…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.2.4 - DirectoryService 'PATH' Local Privilege Escalation2003-04-18 · local · osx · Verified
Impact
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1 |
| Apple | Mac Os X Server | Versions 10.0, 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4 |