NetSight
IP …
medium6.8Public exploit code

CVE-2005-2713

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by s…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5
AppleMac Os X Server
Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5

References