CVE-2006-4413: Apple Remote Desktop

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages.

Affected products

• Apple Remote Desktop: up to and including 3.0

Published 2006-11-18. Last modified 2026-06-16.