PT-2010-1274 · Apple · Macos X

Michael Kisor · Publicado 2010-03-30 · Atualizado 2010-03-31 · CVE-2009-2801

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.8

Description The issue is related to a timing problem in the Application Firewall, which causes it to drop unspecified firewall rules after a system reboot. This might allow remote attackers to bypass intended access restrictions by sending specially crafted packet data.

Recommendations For Apple Mac OS X version 10.5.8, consider restarting the Application Firewall service after each reboot to minimize the risk of exploitation. Additionally, restrict access to sensitive services and data to reduce the potential impact of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-2801

Produtos afetados

Macos X

Referências · 2

• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2801 · Nota de Segurança