Vulnerability Description
Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Apple Remote Desktop | 2.0.0 |
References
- http://lists.apple.com/archives/security-announce/2004/Oct/msg00002.html
- http://lists.apple.com/archives/security-announce/2004/Oct/msg00002.html
FAQ
What is CVE-2004-0962?
CVE-2004-0962 is a vulnerability with a CVSS score of 10.0 (HIGH). Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitra...
How severe is CVE-2004-0962?
CVE-2004-0962 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-0962?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Apple Remote Desktop.