Back to CVE Browser

CVE-2006-4413

HIGH

7.2

CVSS Severity Score

EPSS Score0.0970%

EPSS Percentile22.25th

PublishedNov 18, 2006

Last ModifiedApr 23, 2026

Vulnerability Description

Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages.

Affected Platforms (CPE)

📦

Apple

Remote Desktop

<= 3.0

References & Advisories

🔗 http://lists.apple.com/archives/security-announce/2006/Nov/msg00000.html

🔗 http://secunia.com/advisories/22982

🔗 http://securitytracker.com/id?1017241

🔗 http://www.securityfocus.com/bid/21139

🔗 http://www.vupen.com/english/advisories/2006/4567

🔗 http://lists.apple.com/archives/security-announce/2006/Nov/msg00000.html

🔗 http://secunia.com/advisories/22982

🔗 http://securitytracker.com/id?1017241

Related Vulnerabilities

CVE-2020-188910.0

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron ...

CVE-2001-055510.0

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack ...

CVE-2020-696610.0

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Ver...

CVE-2002-067910.0

Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to exec...