low2.1Public exploit code
CVE-2005-1725
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure tempor…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.4 - launchd Race Condition2005-06-14 · local · osx · Verified
Impact
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X Server | Versions 10.4, 10.4.1 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
- http://marc.info/?l=bugtraq&m=111833509424379&w=2
- http://www.suresec.org/advisories/adv3.pdf
- http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
- http://marc.info/?l=bugtraq&m=111833509424379&w=2
- http://www.suresec.org/advisories/adv3.pdf