PT-2008-5007 · Apple · Itunes+1

Eric Hall · Publicado 2008-09-10 · Atualizado 2008-09-11 · CVE-2008-3634

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 8.0 on Mac OS X 10.4.11

Description The issue presents misleading information about firewall security when iTunes Music Sharing is enabled but blocked by the host-based firewall. This might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.

Recommendations For Apple iTunes versions prior to 8.0 on Mac OS X 10.4.11, update to version 8.0 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-3634

Produtos afetados

Macos X

Itunes

Referências · 4

• http://securitytracker.com/id?1020840 · Nota
• http://securityfocus.com/bid/31090 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2008-3634 · Nota de Segurança
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html · Aviso do Fabricante