Description
Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages.
References
- 22982 third-party-advisory
- 1017241 vdb-entry
- ADV-2006-4567 vdb-entry
- 21139 vdb-entry
- APPLE-SA-2006-11-16 vendor-advisory