PT-2009-2831 · Apple · Macos X

Publicado 2009-02-13 · Atualizado 2011-03-08 · CVE-2009-0138

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.6

Description The issue is related to the improper validation of authentication credentials in the servermgrd (Server Manager) component. This allows remote attackers to modify the system configuration.

Recommendations For Apple Mac OS X version 10.5.6, consider restricting access to the servermgrd component until a fix is available. As a temporary workaround, ensure that only trusted sources can access the system configuration to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2009-0138

Produtos afetados

Macos X

Referências · 7

• http://vupen.com/english/advisories/2009/0422 · Nota
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Aviso do Fabricante
• http://securityfocus.com/bid/33813 · Nota
• http://support.apple.com/kb/HT3438 · Nota
• http://securityfocus.com/bid/33759 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0138 · Nota de Segurança
• http://secunia.com/advisories/33937 · Nota