PT-2008-4993 · Apple · Macos X

Publicado 2008-09-16 · Atualizado 2017-08-08 · CVE-2008-3617

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5 through 10.5.4

Description The issue allows attackers to potentially guess passwords that the user believed were longer due to the display of additional input characters beyond the maximum password length when setting a password for a VNC viewer using Remote Management and Screen Sharing.

Recommendations For Apple Mac OS X versions 10.5 through 10.5.4, consider restricting the use of Remote Management and Screen Sharing until a fix is available, and ensure that strong, unique passwords are used for VNC viewers to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2008-3617

Produtos afetados

Macos X

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-3617 · Nota de Segurança
• http://vupen.com/english/advisories/2008/2584 · Nota
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1020882 · Nota
• http://securityfocus.com/bid/31189 · Correção
• http://us-cert.gov/cas/techalerts/TA08-260A.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45174 · Nota