The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.
| Software | From | Fixed in |
|---|---|---|
| dantz / retrospect_client | 5.0.540 | 5.0.540.x |