CVEvulnerability

CVE-2005-2741

7.2 HIGH Published 2005-10-26 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-10-26
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-264

Description

Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themselves certain rights that should be restricted to administrators.

Affected configurations

• apple mac os x 10.3.9 • apple mac os x 10.4.2 • apple mac os x server 10.3.9 • apple mac os x server 10.4.2 • perry kiehtreiber securityd

Weakness · not in database (1)

CWE-264

Referenced by CWE · observed example (2)

CWE-266 Incorrect Privilege Assignment weakness
CWE-269 Improper Privilege Management weakness

References

http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html Vendor Advisory
http://secunia.com/advisories/16920/ Patch, Vendor Advisory
http://www.auscert.org.au/5509 Vendor Advisory
http://www.ciac.org/ciac/bulletins/p-312.shtml Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html Vendor Advisory
http://secunia.com/advisories/16920/ Patch, Vendor Advisory
http://www.auscert.org.au/5509 Vendor Advisory
http://www.ciac.org/ciac/bulletins/p-312.shtml Vendor Advisory