CVE-2005-1307 The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to exec...
HighCVSS 7.2
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe version cue | = gold | No fix listed |
| apple mac os x | = 10.3.6 | No fix listed |
References
- 20041206 Local root exploit on Mac OS X with Adobe Version Cue mailing-list
- 20050516 Mac OS X - Adobe Version Cue local root exploit [c version exploit] mailing-list
- 13399 third-party-advisory
- 1012446 vdb-entry
- www.adobe.com
- 12297 vdb-entry
- 12298 vdb-entry
- www.securiteam.com exploit
- 11833 vdb-entry
- version-cue-gain-privileges(18445) vdb-entry