First published: Fri Apr 22 2005(Updated: )
Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | =10.2.5 | |
Apple iOS and macOS | =10.2.7 | |
Apple iOS and macOS | =10.0.2 | |
Apple iOS and macOS | =10.2.8 | |
Apple iOS and macOS | =10.2.1 | |
Apple iOS and macOS | =10.3.1 | |
Apple iOS and macOS | =10.3.5 | |
Apple iOS and macOS | =10.1 | |
Apple iOS and macOS | =10.0.1 | |
Apple iOS and macOS | =10.0.3 | |
Apple iOS and macOS | =10.1.4 | |
Apple iOS and macOS | =10.2.4 | |
Apple iOS and macOS | =10.3.2 | |
Apple iOS and macOS | =10.2.2 | |
Apple iOS and macOS | =10.0 | |
Apple iOS and macOS | =10.3.7 | |
Apple iOS and macOS | =10.1.3 | |
Apple iOS and macOS | =10.3.6 | |
Apple iOS and macOS | =10.1.5 | |
Apple iOS and macOS | =10.3.8 | |
Apple iOS and macOS | =10.1.1 | |
Apple iOS and macOS | =10.3.9 | |
Apple iOS and macOS | =10.3.4 | |
Apple iOS and macOS | =10.3.3 | |
Apple iOS and macOS | =10.2.6 | |
Apple iOS and macOS | =10.2.3 | |
Apple iOS and macOS | =10.2 | |
Apple iOS and macOS | =10.3 | |
Apple iOS and macOS | =10.0.4 | |
Apple iOS and macOS | =10.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0970 is considered a high severity vulnerability due to the potential for unauthorized escalated privileges.
To fix CVE-2005-0970, ensure your Mac OS X is updated to a version later than 10.3.9 where this vulnerability has been addressed.
The primary risks include the ability for attackers to create and execute malicious scripts with elevated privileges.
CVE-2005-0970 affects Mac OS X versions 10.0 through 10.3.9.
CVE-2005-0970 is less of a threat today, but systems running affected versions remain vulnerable if not updated.