PT-2008-4994 · Apple · Macos X

Publicado 2008-09-16 · Atualizado 2017-08-08 · CVE-2008-3618

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5 through 10.5.4

Description The issue concerns the File Sharing pane in the Sharing preference pane, which does not properly inform users about the scope of file sharing. Specifically, it fails to notify users that the complete contents of their own home directories are shared for their own use. This lack of transparency might allow attackers to exploit other vulnerabilities and access files that the user did not intend to share.

Recommendations For Mac OS X versions 10.5 through 10.5.4, consider restricting file sharing to only the intended directories and files to minimize the risk of unintended access. As a temporary workaround, users should be cautious about the files stored in their home directories, ensuring that sensitive information is not inadvertently shared.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-3618

Produtos afetados

Macos X

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-3618 · Nota de Segurança
• http://kb.cert.org/vuls/id/126787 · Correção
• http://us-cert.gov/cas/techalerts/TA08-260A.html · Nota
• http://vupen.com/english/advisories/2008/2584 · Nota
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1020883 · Nota
• http://securityfocus.com/bid/31189 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45175 · Nota