PT-2012-2760 · Apple · Macos X

Jaakko Pero + 6 · Publicado 2012-05-11 · Atualizado 2017-12-05 · CVE-2012-0652

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.7.3

Description The issue concerns the Login Window in Apple Mac OS X. When Legacy File Vault or networked home directories are enabled, it does not properly restrict what is written to the system log for network logins. This allows local users to obtain sensitive information by reading the log.

Recommendations For Apple Mac OS X version 10.7.3, consider disabling Legacy File Vault or networked home directories as a temporary workaround to minimize the risk of exploitation. Restrict access to the system log to prevent local users from obtaining sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-0652

Produtos afetados

Macos X

Referências · 8

• http://securitytracker.com/id?1027024 · Nota
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html · Aviso do Fabricante
• http://securityfocus.com/bid/53445 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0652 · Nota de Segurança
• http://support.apple.com/kb/HT5281 · Aviso do Fabricante
• http://securityfocus.com/bid/53457 · Nota
• http://support.apple.com/kb/HT5501 · Nota
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Aviso do Fabricante