PT-2005-2335 · Apple · Macos X

Kevin Finisterre · Publicado 2005-05-04 · Atualizado 2008-09-05 · CVE-2005-1332

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mac OS X version 10.3.9

Description: The issue allows remote attackers to access files without user notification and enables local users to access files via the default directory, due to the Bluetooth file exchange service being enabled by default.

Recommendations: For Mac OS X version 10.3.9, consider disabling the Bluetooth file exchange service to prevent unauthorized access to files. Restrict access to the default directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-1332

Produtos afetados

Macos X

Referências · 6

• http://docs.info.apple.com/article.html?artnum=301381 · Aviso do Fabricante
• http://digitalmunition.com/DMA%5B2005-0502a%5D.txt · Nota
• http://lists.apple.com/archives/security-announce/2005/May/msg00001.html · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA05-136A.html · Nota
• http://kb.cert.org/vuls/id/258390 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1332 · Nota de Segurança