Unrated severityNVD Advisory· Published Jun 27, 2006· Updated Jun 16, 2026
CVE-2006-1471
CVE-2006-1471
Description
Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.
Affected products
15cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
- (no CPE)range: >=10.4, <=10.4.6
cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- secunia.com/advisories/20877nvdVendor Advisory
- www.vupen.com/english/advisories/2006/2566nvdVendor Advisory
- lists.apple.com/archives/security-announce/2006/Jun/msg00000.htmlnvd
- securitytracker.com/idnvd
- www.osvdb.org/26933nvd
- www.securityfocus.com/archive/1/438699/100/0/threadednvd
- www.securityfocus.com/bid/18686nvd
- www.securityfocus.com/bid/18724nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27479nvd
News mentions
0No linked articles in our index yet.