CVE-2005-2713: Medium severity Apple iOS and macOS vulnerability
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2713?
CVE-2005-2713 is rated as a moderate severity vulnerability that allows local users to create arbitrary world-writable files as root.
How do I fix CVE-2005-2713?
To fix CVE-2005-2713, users should upgrade their Mac OS X to version 10.3.9 or later, or 10.4.5 or later.
What systems are affected by CVE-2005-2713?
CVE-2005-2713 affects macOS versions 10.3.x prior to 10.3.9 and 10.4.x prior to 10.4.5.
Is CVE-2005-2713 exploitable remotely?
CVE-2005-2713 is not remotely exploitable as it requires local user access to be exploited.
What actions should I take if I can't upgrade my system to fix CVE-2005-2713?
If an upgrade is not possible, consider tightening file permissions and implementing user access restrictions to mitigate risks associated with CVE-2005-2713.