PT-2015-3060 · Apple+1 · Os X Server+1

Zachary Jones · Publicado 2015-09-18 · Atualizado 2016-12-22 · CVE-2015-5911

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.0.3

Description The issue is related to multiple unspecified vulnerabilities in the Twisted module of the Wiki Server in OS X Server. These vulnerabilities are caused by errors in the code. An attacker, acting remotely, can exploit these vulnerabilities by using a specially crafted XML document, potentially compromising the confidentiality, integrity, and availability of protected information.

Recommendations For OS X Server versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the Wiki Server or disabling the Twisted module until the update can be applied. Avoid using the Wiki Server with untrusted XML documents until the issue is resolved.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-00265

CVE-2015-5911

Produtos afetados

Os X Server

Twisted

Referências · 5

• http://securitytracker.com/id/1033595 · Nota
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html · Aviso do Fabricante
• https://support.apple.com/HT205219 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00265 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-5911 · Nota de Segurança