5.1med
CVE-2006-08482 exploits
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary com…
Published 20 y ago · modified 4 mo ago · JSON
CVSS
5.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
58.1%
percentile 99%
Public exploits
2
Metasploit · Exploit-DB
Summary
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.
Exploit prediction (EPSS)
58.10% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit exploit/osx/browser/safari_metadata_archive Safari Archive Metadata Command Execution · metasploit exploit, excellent rank · 2006-02-21
- EDB-16866 Apple Safari - Archive Metadata Command Execution (Metasploit) · remote · 2010-09-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-16 Configuration
References
- secunia.com /advisories/18963 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- mathematik.uni-ulm.de /numerik/staff/lehn/macosx.html · x_refsource_MISC, x_transferred
- kb.cert.org /vuls/id/999708 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- securityfocus.com /bid/16736 · vdb-entry, x_refsource_BID, x_transferred
- securitytracker.com /id?1015652 · vdb-entry, x_refsource_SECTRACK, x_transferred
- us-cert.gov /cas/techalerts/TA06-053A.html · third-party-advisory, x_refsource_CERT, x_transferred
- vupen.com /english/advisories/2006/0671 · vdb-entry, x_refsource_VUPEN, x_transferred
- us-cert.gov /cas/techalerts/TA06-062A.html · third-party-advisory, x_refsource_CERT, x_transferred
- heise.de /english/newsticker/news/69862 · x_refsource_MISC, x_transferred
- osvdb.org /23510 · vdb-entry, x_refsource_OSVDB, x_transferred
- frsirt.com /exploits/20060222.safari_safefiles_exec.pm.php · x_refsource_MISC, x_transferred
- docs.info.apple.com /article.html?artnum=303382 · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/24808 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2006-0848
- NVD: CVE-2006-0848
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.