PT-2007-2189 · Apple · Macos X

Publicado 2007-04-24 · Atualizado 2011-03-08 · CVE-2007-0738

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.9

Description The issue concerns the Login Window in Apple Mac OS X, where the screen saver authentication dialog is not displayed under certain conditions when the computer wakes from sleep. This occurs despite the option to require a password to wake the computer from sleep being enabled, allowing local users to bypass authentication controls.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.9, consider disabling the sleep function or setting the computer to never sleep to minimize the risk of exploitation until a fix is available. As a temporary workaround, ensure that physical access to the computer is restricted to authorized personnel.

Correção

Identificadores relacionados

CVE-2007-0738

Produtos afetados

Macos X

Referências · 9

• http://securitytracker.com/id?1017939 · Nota
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Nota
• http://securityfocus.com/bid/23569 · Correção
• http://secunia.com/advisories/24966 · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0738 · Nota de Segurança
• http://osvdb.org/34863 · Nota
• http://docs.info.apple.com/article.html?artnum=305391 · Nota
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Aviso do Fabricante