First published: Thu Nov 30 2006(Updated: )
The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not properly clean the environment when executing commands, which allows local users to gain privileges via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.4.3 | |
macOS Yosemite | =10.3.1 | |
macOS Yosemite | =10.3.5 | |
macOS Yosemite | =10.4.1 | |
macOS Yosemite | =10.4.7 | |
macOS Yosemite | =10.4.4 | |
macOS Yosemite | =10.3.2 | |
macOS Yosemite | =10.3.7 | |
macOS Yosemite | =10.3.6 | |
macOS Yosemite | =10.4 | |
macOS Yosemite | =10.4.6 | |
macOS Yosemite | =10.3.8 | |
macOS Yosemite | =10.4.5 | |
macOS Yosemite | =10.3.9 | |
macOS Yosemite | =10.3.4 | |
macOS Yosemite | =10.4.8 | |
macOS Yosemite | =10.3.3 | |
macOS Yosemite | =10.4.2 | |
macOS Yosemite | =10.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-4411 is classified as a moderate severity vulnerability.
To fix CVE-2006-4411, users should upgrade to a later version of Mac OS X that addresses this vulnerability.
CVE-2006-4411 affects local users running vulnerable versions of Mac OS X ranging from 10.3.1 to 10.4.8.
CVE-2006-4411 is a privilege escalation vulnerability in the VPN service of Mac OS X.
CVE-2006-4411 cannot be exploited remotely as it requires local user access to the affected system.