Unscored severity · published Sep 19, 2006
CVE-2006-4887
Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Apple Remote Desktop · Apple
2.0.0; 2.1.0; 3.0.0 · source: NVD
MO
Mac OS X · Apple
through 10.2.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4887
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4887
www.osvdb.org
http://www.osvdb.org/32260
www.securityfocus.com
http://www.securityfocus.com/archive/1/446371/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/446751/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/447043/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20092
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29060
More from Apple Remote Desktop
–
CVE-2013-5229
The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep,…
–
CVE-2013-5136
Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message,…
–
CVE-2013-5135
Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via…
–
CVE-2012-0681
Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain…
–
CVE-2004-0962
Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated…