VULNERABILITY INTELLIGENCE

CVE-2005-2714

CVSS score6.8 MEDIUM

EPSS probability0.55%

CISA KEVNot currently listed

Published2005-12-31

Last modified2026-06-16

Description

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.