← Back

CVE-2006-4887

nvd nist
Published: Sep 19, 2006Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it.

Affected (4)

Apple
2 products
Apple Remote Desktop
Mac Os X
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Apple Remote Desktop
Version 2.0.0
Apple Remote Desktop
Version 2.1.0
Apple Remote Desktop
Version 3.0.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Mac Os X
Up to 10.2.8

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.