PT-2008-1699 · X.Org Foundation+1 · X11+1

Publicado 2008-02-12 · Atualizado 2011-03-08 · CVE-2008-0037

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5 through 10.5.1

Description The issue is related to X11 in Mac OS X, where it does not properly handle the "Allow connections from network client" preference when it is disabled. This allows remote attackers to bypass intended access restrictions and connect to the X server.

Recommendations For Mac OS X versions 10.5 through 10.5.1, consider disabling the X11 service until a patch is available to prevent remote attackers from connecting to the X server.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0037

Produtos afetados

Macos X

X11

Referências · 8

• http://securityfocus.com/bid/27736 · Nota
• http://docs.info.apple.com/article.html?artnum=307430 · Nota
• http://secunia.com/advisories/28891 · Nota
• http://us-cert.gov/cas/techalerts/TA08-043B.html · Nota
• http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0037 · Nota de Segurança
• http://securitytracker.com/id?1019365 · Nota
• http://vupen.com/english/advisories/2008/0495/references · Nota