NetSight
medium4.6

CVE-2014-1265

The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the cu…

Impact

The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.9.1
Versions 10.7.0, 10.7.1, 10.7.2, 10.7.3, 10.7.4
AppleMac Os X Server
Versions 10.7.0, 10.7.1, 10.7.2, 10.7.3, 10.7.4, 10.7.5

Weakness classification

References