CVE-2004-0962: Critical severity apple remote desktop vulnerability

Published Oct 28, 2004

Updated

Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.

Affected Software

1 affected component

Apple Apple Remote Desktop=2.0.0

Event History

Oct 28, 2004

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0962?

CVE-2004-0962 is considered a critical vulnerability due to its potential to allow remote authenticated users to execute arbitrary code as root.

How do I fix CVE-2004-0962?

To mitigate CVE-2004-0962, users should update Apple Remote Desktop to the latest version provided by Apple.

Who is affected by CVE-2004-0962?

CVE-2004-0962 affects users of Apple Remote Desktop Client 1.2.4 when used in conjunction with Apple Remote Desktop Administrator application.

What kind of attack is possible with CVE-2004-0962?

CVE-2004-0962 allows remote authenticated users to execute arbitrary code within the affected system while loginwindow is active.

Is CVE-2004-0962 specific to certain Mac OS versions?

CVE-2004-0962 specifically affects Apple Remote Desktop version 2.0.0, which may be tied to certain Mac OS versions corresponding with its release.