Vulnerabilities > CVE-2004-0486 - Unspecified vulnerability in Apple mac OS X and mac OS X Server
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 8 |
Exploit-Db
description | Apple Mac OS X 10.3.x Help Protocol Remote Code Execution Vulnerability. CVE-2004-0486. Remote exploit for osx platform |
id | EDB-ID:24121 |
last seen | 2016-02-02 |
modified | 2004-05-17 |
published | 2004-05-17 |
reporter | Troels Bay |
source | https://www.exploit-db.com/download/24121/ |
title | Apple Mac OS X 10.3.x Help Protocol Remote Code Execution Vulnerability |
Nessus
NASL family | MacOS X Local Security Checks |
NASL id | MACOSX_SECUPD20040524.NASL |
description | The remote host is missing Security Update 2004-05-24. This security update includes fixes for the following components : HelpViewer Terminal This update fixes security issues that could allow an attacker to execute arbitrary commands on the remote host by exploiting a flaw in Safari and the components listed above. A remote attacker could exploit this flaw by tricking a user into visiting a malicious website. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 12519 |
published | 2004-07-06 |
reporter | This script is Copyright (C) 2004-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/12519 |
title | Mac OS X Multiple Vulnerabilities (Security Update 2004-05-24) |
code |
|
References
- http://www.fundisom.com/owned/warning
- http://secunia.com/advisories/11622/
- http://www.kb.cert.org/vuls/id/578798
- http://www.securityfocus.com/bid/10356
- http://lists.apple.com/mhonarc/security-announce/msg00053.html
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html
- http://www.osvdb.org/6184
- http://securitytracker.com/id?1010167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16166