PT-2010-3078 · Apple · Macos X

Publicado 2010-06-17 · Atualizado 2010-06-18 · CVE-2010-1381

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8, and 10.6 through 10.6.3

Description The default configuration of SMB File Server in the affected versions enables support for wide links. This allows remote authenticated users to access arbitrary files via vectors involving symbolic links.

Recommendations For Apple Mac OS X version 10.5.8, consider disabling the SMB File Server until a patch is available. For Apple Mac OS X versions 10.6 through 10.6.3, update to version 10.6.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2010-1381

Produtos afetados

Macos X

Referências · 7

• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html · Aviso do Fabricante
• http://securitytracker.com/id?1024103 · Nota
• http://support.apple.com/kb/HT4188 · Aviso do Fabricante
• http://securityfocus.com/bid/40871 · Correção
• http://secunia.com/advisories/40220 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1381 · Nota de Segurança
• http://vupen.com/english/advisories/2010/1481 · Aviso do Fabricante