ByteOS Network

Vulnerability Details :

CVE-2008-2314

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-01 Jul, 2008 | 18:00

Updated At-07 Aug, 2024 | 08:58

Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:01 Jul, 2008 | 18:00

Updated At:07 Aug, 2024 | 08:58

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://support.apple.com/kb/HT2163	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2008/1981/references	vdb-entry x_refsource_VUPEN
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	vendor-advisory x_refsource_APPLE
http://secunia.com/advisories/30802	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/30018	vdb-entry x_refsource_BID
http://securitytracker.com/id?1020395	vdb-entry x_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilities/43497	vdb-entry x_refsource_XF

Hyperlink: http://support.apple.com/kb/HT2163

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2008/1981/references

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://secunia.com/advisories/30802

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/30018

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://securitytracker.com/id?1020395

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43497

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://support.apple.com/kb/HT2163	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2008/1981/references	vdb-entry x_refsource_VUPEN x_transferred
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/30802	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/30018	vdb-entry x_refsource_BID x_transferred
http://securitytracker.com/id?1020395	vdb-entry x_refsource_SECTRACK x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/43497	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://support.apple.com/kb/HT2163

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/1981/references

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://secunia.com/advisories/30802

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/30018

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://securitytracker.com/id?1020395

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43497

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:01 Jul, 2008 | 18:41

Updated At:10 Feb, 2020 | 21:14

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 4.4

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Apple Inc.

>>mac_os_x>>10.4.1

cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.2

cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.3

cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.4

cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.5

cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.6

cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.7

cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.8

cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.9

cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.10

cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.11

cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.5

cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.1

cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.2

cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.3

cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.4

cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.5

cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.6

cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.7

cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.8

cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.9

cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.10

cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.11

cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.5

cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.5.1

cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.5.3

cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	cve@mitre.org	N/A
http://secunia.com/advisories/30802	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1020395	cve@mitre.org	N/A
http://support.apple.com/kb/HT2163	cve@mitre.org	N/A
http://www.securityfocus.com/bid/30018	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/1981/references	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43497	cve@mitre.org	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/30802

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1020395

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT2163

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/30018

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1981/references

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43497

Source: cve@mitre.org

Resource: N/A

Similar CVEs

111Records found

CVE-2007-5043

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.06% / 17.49%

7 Day CHG~0.00%

Published-24 Sep, 2007 | 00:00

Updated-07 Aug, 2024 | 15:17

Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to (1) cause a denial of service (crash) and possibly gain privileges via the NtCreateSection kernel SSDT hook or (2) cause a denial of service (avp.exe service outage) via the NtLoadDriver kernel SSDT hook. NOTE: this issue may partially overlap CVE-2006-3074.

Vendor-n/a Kaspersky Lab

Product-kaspersky_internet_security n/a

CWE ID-CWE-264

Not Available

CWE ID-CWE-20

Improper Input Validation

CVE-2007-4849

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.07% / 21.58%

7 Day CHG~0.00%

Published-12 Sep, 2007 | 20:00

Updated-07 Aug, 2024 | 15:08

JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.

Vendor-one_laptop_per_child n/a

Product-olpc_linux n/a

CWE ID-CWE-264

Not Available

CVE-2007-4563

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.05% / 15.77%

7 Day CHG~0.00%

Published-28 Aug, 2007 | 01:00

Updated-07 Aug, 2024 | 15:01

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

Vendor-n/a Hitachi, Ltd.

Product-cosminexus_application_server_standard ucosminexus_service_platform ucosminexus_application_server_enterprise electronic_form_workflow_-_standard_set ucosminexus_application_server_standard electronic_form_workflow_-professional_library_set cosminexus_application_server_enterprise n/a

CWE ID-CWE-264

Not Available

CVE-2007-3740

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-4.4||MEDIUM

EPSS-0.12% / 32.27%

7 Day CHG~0.00%

Published-14 Sep, 2007 | 01:00

Updated-07 Aug, 2024 | 14:28

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.

Vendor-n/a Linux Kernel Organization, Inc

Product-linux_kernel n/a

CWE ID-CWE-264

Not Available

CVE-2007-2063

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.06% / 17.27%

7 Day CHG~0.00%

Published-18 Apr, 2007 | 02:20

Updated-07 Aug, 2024 | 13:23

SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be stopped, or (2) when _BPX_BATCH_UMASK is missing from the environment, creates HFS files with insecure permissions, which allows local users to read or modify these files and have other unknown impact.

Vendor-ssh n/a

Product-tectia_server n/a

CWE ID-CWE-264

Not Available

CVE-2019-11773

Matching Score-4

Assigner-Eclipse Foundation

View Details

Matching Score-4

Assigner-Eclipse Foundation

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.64%

7 Day CHG~0.00%

Published-12 Sep, 2019 | 17:25

Updated-04 Aug, 2024 | 23:03

Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users.

Vendor-Eclipse Foundation AISBL

Product-omr Eclipse OMR

CWE ID-CWE-264

Not Available

CWE ID-CWE-427

Uncontrolled Search Path Element

CVE-2017-18450

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.5||MEDIUM

EPSS-0.04% / 12.12%

7 Day CHG~0.00%

Published-02 Aug, 2019 | 16:24

Updated-05 Aug, 2024 | 21:20

cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).

Vendor-n/a cPanel (WebPros International, LLC)

Product-cpanel n/a

CWE ID-CWE-264

Not Available

CVE-2020-7260

Matching Score-4

Assigner-Trellix

View Details

Matching Score-4

Assigner-Trellix

CVSS Score-7.3||HIGH

EPSS-0.05% / 16.56%

7 Day CHG~0.00%

Published-26 Mar, 2020 | 10:55

Updated-17 Sep, 2024 | 02:51

MACC installer DLL side loading

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.

Vendor-McAfee, LLC

Product-application_and_change_control Mcafee Application and Change Control (MACC)

CWE ID-CWE-264

Not Available

CWE ID-CWE-426

Untrusted Search Path

CVE-2019-0164

Matching Score-4

Assigner-Intel Corporation

View Details

Matching Score-4

Assigner-Intel Corporation

CVSS Score-7.3||HIGH

EPSS-0.07% / 22.20%

7 Day CHG~0.00%

Published-13 Jun, 2019 | 15:36

Updated-04 Aug, 2024 | 17:44

Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

Vendor-n/a Lenovo Group Limited Intel Corporation

Product-thinkstation_p910_firmware thinkstation_p710_firmware thinkstation_p510 thinkstation_p710 thinkstation_p910 thinkstation_p410_firmware thinkstation_p410 thinkstation_p510_firmware turbo_boost_max_technology_3.0 Intel(R) Turbo Boost Max Technology 3.0

CWE ID-CWE-264

Not Available

CVE-2008-1946

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-4.4||MEDIUM

EPSS-0.07% / 21.52%

7 Day CHG~0.00%

Published-28 Jul, 2008 | 17:00

Updated-07 Aug, 2024 | 08:41

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module.

Vendor-n/a GNU

Product-coreutils n/a

CWE ID-CWE-264

Not Available

CVE-2007-3852

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-4.4||MEDIUM

EPSS-0.14% / 34.97%

7 Day CHG~0.00%

Published-14 Aug, 2007 | 18:00

Updated-07 Aug, 2024 | 14:28

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Vendor-sysstat n/a

Product-sysstat n/a

CWE ID-CWE-264

Not Available

CVE-2008-2314

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs