Unscored severity · published May 17, 2005
CVE-2005-1307
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which…
–
CVSS
3.7%
EPSS
No
On KEV
Description
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Mac OS X · Apple
10.3.6 · source: NVD
VC
Version Cue · Adobe
gold · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1307
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1307
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2004-12/0040.html
marc.info
http://marc.info/?l=bugtraq&m=111627622403544&w=2
secunia.com
http://secunia.com/advisories/13399
securitytracker.com
http://securitytracker.com/id?1012446
www.adobe.com
http://www.adobe.com/support/techdocs/331621.html
www.osvdb.org
http://www.osvdb.org/12297
More from Version Cue
–
CVE-2006-0525
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission…
–
CVE-2005-1842
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with…
–
CVE-2005-1843
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary…