Vulnerability in Dantz Retrospect Client
CVE-2003-0490
The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.
EPSS: 0.003 (27.1th percentile) — read the EPSS interpretation.
Affected products
- Dantz Retrospect_client — versions 5.0.540
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)