PT-2005-3409 · Apple · Macos X

Chris Pepper + 1 · Publicado 2005-08-19 · Atualizado 2008-09-05 · CVE-2005-2510

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.4 through 10.4.2

Description The issue concerns the Server Admin tool in servermgr ipfilter, which may not properly write firewall rules when using multiple subnets and Address Groups under certain conditions. This could lead to firewall policies being less restrictive than intended by the administrator.

Recommendations For Mac OS X versions 10.4 through 10.4.2, consider manually reviewing and adjusting firewall rules to ensure they align with the intended policies until a fix is available. As a temporary workaround, restrict access to sensitive resources and networks to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2510

Produtos afetados

Macos X

Referências · 4

• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2510 · Nota de Segurança
• http://securitytracker.com/id?1014708 · Nota
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Correção, Aviso do Fabricante