PT-2005-3403 · Apple · Macos X

John M. Glenn · Publicado 2005-08-19 · Atualizado 2008-09-05 · CVE-2005-2504

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X version 10.4.2

Description The System Profiler in Mac OS X incorrectly labels a Bluetooth device as not requiring authentication, even when the user has selected the option to require pairing for security. This could lead to confusion among users about the validity of their security settings.

Recommendations For Mac OS X version 10.4.2, consider disabling the Bluetooth device until a patch is available to correct the System Profiler's labeling issue, or review and manually verify the security settings of each Bluetooth device to ensure they match the intended configuration.

Correção

Identificadores relacionados

CVE-2005-2504

Produtos afetados

Macos X

Referências · 3

• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2504 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Correção, Aviso do Fabricante