PT-2006-5198 · Apple · Macos X

Ragnar Sundblad · Publicado 2006-10-02 · Atualizado 2017-07-20 · CVE-2006-4394

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.7

Description A logic error in the LoginWindow component allows network accounts without GUIDs to bypass service access controls, enabling unauthorized login to the system. This issue can be exploited via unknown vectors in the loginwindow.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.7, update to a version later than 10.4.7 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-4394

Produtos afetados

Macos X

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-4394 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1016959 · Correção
• http://osvdb.org/29272 · Nota
• http://kb.cert.org/vuls/id/897628 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29293 · Nota
• http://us-cert.gov/cas/techalerts/TA06-275A.html · Nota
• http://secunia.com/advisories/22187 · Aviso do Fabricante
• http://securityfocus.com/bid/20271 · Correção
• http://vupen.com/english/advisories/2006/3852 · Nota