CVE-2005-0970

Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.

Score

CVSS 2.0 7.6 High

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Mac Os X (Apple)

References

• http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html