CVE-2005-1342

Опубликовано: 04 мая 2005

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.

Ссылки

http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
Patch
Vendor Advisory
http://remahl.se/david/vuln/011/
Exploit
Vendor Advisory
http://secunia.com/advisories/15227
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/356070
Third Party Advisory
US Government Resource
http://www.osvdb.org/16084
Vendor Advisory
http://www.securityfocus.com/bid/13480
Patch
http://www.us-cert.gov/cas/techalerts/TA05-136A.html
US Government Resource
http://www.vupen.com/english/advisories/2005/0455
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
Patch
Vendor Advisory
http://remahl.se/david/vuln/011/
Exploit
Vendor Advisory
http://secunia.com/advisories/15227
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/356070
Third Party Advisory
US Government Resource
http://www.osvdb.org/16084
Vendor Advisory
http://www.securityfocus.com/bid/13480
Patch
http://www.us-cert.gov/cas/techalerts/TA05-136A.html
US Government Resource
http://www.vupen.com/english/advisories/2005/0455

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apple:terminal:1.4.4:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.17699

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g2f6-93c5-wq6v

github

почти 4 года назад