PT-2007-2190 · Apple · Macos X

Publicado 2007-04-24 · Atualizado 2011-03-08 · CVE-2007-0739

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.9

Description The issue allows local users to bypass authentication controls due to the Login Window displaying the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.9, update to a version that fixes this issue to prevent local users from bypassing authentication controls.

Correção

Identificadores relacionados

CVE-2007-0739

Produtos afetados

Macos X

Referências · 9

• http://securitytracker.com/id?1017939 · Nota
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Nota
• http://securityfocus.com/bid/23569 · Correção
• http://secunia.com/advisories/24966 · Nota
• http://osvdb.org/34864 · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• http://docs.info.apple.com/article.html?artnum=305391 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0739 · Nota de Segurança
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Aviso do Fabricante