Security Advisory

CVE-2006-1471

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-06-27 22:00:00

Last updated 2024-08-07 17:12:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.

← Browse all CVEs View on cve.org ↗