PT-2012-2763 · Apple · Macos X

Espectalll123 + 1 · Publicado 2012-05-11 · Atualizado 2017-12-05 · CVE-2012-0656

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.3

Description A race condition exists in the LoginUIFramework of Apple Mac OS X, allowing physically proximate attackers to login to arbitrary accounts by entering the account name and no password when the Guest account is enabled.

Recommendations For Apple Mac OS X versions 10.7.x through 10.7.3, update to version 10.7.4 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2012-0656

Produtos afetados

Macos X

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-0656 · Nota de Segurança
• http://securityfocus.com/bid/53459 · Nota
• http://securityfocus.com/bid/53445 · Nota
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Aviso do Fabricante
• http://support.apple.com/kb/HT5281 · Aviso do Fabricante