ByteOS Network

NVD Vulnerability Details :

CVE-2007-4685

Modified

Source-cve@mitre.org

Published At-15 Nov, 2007 | 01:46

Updated At-29 Jul, 2017 | 01:33

The kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to gain privileges by executing setuid or setgid programs in which the stdio, stderr, or stdout file descriptors are "in an unexpected state."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Apple Inc.

>>mac_os_x>>10.4.1

cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.2

cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.3

cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.4

cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.5

cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.6

cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.7

cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.8

cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.9

cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>10.4.10

cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.1

cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.2

cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.3

cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.4

cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.5

cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.6

cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.7

cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.8

cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.9

cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x_server>>10.4.10

cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://docs.info.apple.com/article.html?artnum=307041	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html	cve@mitre.org	Patch
http://secunia.com/advisories/27643	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1018950	cve@mitre.org	N/A
http://www.securityfocus.com/bid/26444	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA07-319A.html	cve@mitre.org	US Government Resource
http://www.vupen.com/english/advisories/2007/3868	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/38469	cve@mitre.org	N/A