PT-2005-2335 · Apple · Macos X

Kevin Finisterre · Published 2005-05-04 · Updated 2008-09-05 · CVE-2005-1332

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mac OS X version 10.3.9

Description: The issue allows remote attackers to access files without user notification and enables local users to access files via the default directory, due to the Bluetooth file exchange service being enabled by default.

Recommendations: For Mac OS X version 10.3.9, consider disabling the Bluetooth file exchange service to prevent unauthorized access to files. Restrict access to the default directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-1332

Affected Products

Macos X

References · 6

• http://docs.info.apple.com/article.html?artnum=301381 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2005/May/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1332 · Security Note
• http://digitalmunition.com/DMA%5B2005-0502a%5D.txt · Note
• http://us-cert.gov/cas/techalerts/TA05-136A.html · Note
• http://kb.cert.org/vuls/id/258390 · Note