CVE-2005-2714
No fix known EPSS <1%
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.
Products: apple mac_os_x, apple mac_os_x_server