2.1low
CVE-2005-1472
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 24%
Public exploits
0
none known
Summary
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.
Exploit prediction (EPSS)
0.31% probability of exploitation in the next 30 days, higher than 24% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
References
- lists.apple.com /archives/security-announce/2005/May/msg00004.html · vendor-advisory, x_refsource_APPLE, x_transferred
Sources
- CVE List: CVE-2005-1472
- NVD: CVE-2005-1472
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.