PT-2007-5861 · Apple · Macos X

Publicado 2007-11-15 · Atualizado 2017-07-29 · CVE-2007-4703

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X version 10.5

Description: The issue concerns the Application Firewall in Apple Mac OS X, which fails to prevent a root process from accepting incoming connections. This occurs even when the "Block incoming connections" option has been set for its associated executable, potentially allowing remote attackers or local root processes to bypass intended access restrictions.

Recommendations: For Apple Mac OS X version 10.5, consider disabling the executable associated with the vulnerable Application Firewall setting until a patch is available, or apply specific configuration changes to restrict incoming connections for root processes.

Correção

Identificadores relacionados

CVE-2007-4703

Produtos afetados

Macos X

Referências · 8

• http://secunia.com/advisories/27695 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-4703 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html · Correção, Aviso do Fabricante
• http://vupen.com/english/advisories/2007/3897 · Aviso do Fabricante
• http://docs.info.apple.com/article.html?artnum=307004 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38479 · Nota
• http://securitytracker.com/id?1018958 · Nota
• http://securityfocus.com/bid/26460 · Nota