PT-2008-1708 · Apple · Macos X

Publicado 2008-03-18 · Atualizado 2017-08-08 · CVE-2008-0046

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.2

Description The Application Firewall in Apple Mac OS X has an incorrect German translation for the "Set access for specific services and applications" radio button. This might cause the user to believe that the button is used to restrict access only to specific services and applications, potentially allowing attackers to bypass intended access restrictions.

Recommendations For Apple Mac OS X version 10.5.2, consider using the English translation or seeking additional guidance to ensure proper configuration of the Application Firewall to avoid unintended access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0046

Produtos afetados

Macos X

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41317 · Nota
• http://docs.info.apple.com/article.html?artnum=307562 · Nota
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0046 · Nota de Segurança
• http://secunia.com/advisories/29420 · Nota
• http://securitytracker.com/id?1019658 · Nota
• http://us-cert.gov/cas/techalerts/TA08-079A.html · Nota
• http://securityfocus.com/bid/28368 · Nota
• http://securityfocus.com/bid/28304 · Nota
• http://vupen.com/english/advisories/2008/0924/references · Nota