CVE-2006-4411: High severity Apple iOS and macOS vulnerability
Published Nov 30, 2006
·Updated
The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not properly clean the environment when executing commands, which allows local users to gain privileges via unspecified vectors.
Affected Software
19 affected components
Apple iOS and macOS=10.4.3
Apple iOS and macOS=10.3.1
Apple iOS and macOS=10.3.5
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.3.7
Apple iOS and macOS=10.3.6
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.3.8
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.3
Remediation
Patch Available
Patch Available
Event History
Nov 30, 2006
CVE Published
04:28 PM
Data Sourced
via NVD·04:28 PM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4411?
CVE-2006-4411 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2006-4411?
To fix CVE-2006-4411, users should upgrade to a later version of Mac OS X that addresses this vulnerability.
3
Who is affected by CVE-2006-4411?
CVE-2006-4411 affects local users running vulnerable versions of Mac OS X ranging from 10.3.1 to 10.4.8.
4
What type of vulnerability is CVE-2006-4411?
CVE-2006-4411 is a privilege escalation vulnerability in the VPN service of Mac OS X.
5
Can CVE-2006-4411 be exploited remotely?
CVE-2006-4411 cannot be exploited remotely as it requires local user access to the affected system.