PT-2005-3403 · Apple · Macos X

John M. Glenn · Published 2005-08-19 · Updated 2008-09-05 · CVE-2005-2504

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X version 10.4.2

Description The System Profiler in Mac OS X incorrectly labels a Bluetooth device as not requiring authentication, even when the user has selected the option to require pairing for security. This could lead to confusion among users about the validity of their security settings.

Recommendations For Mac OS X version 10.4.2, consider disabling the Bluetooth device until a patch is available to correct the System Profiler's labeling issue, or review and manually verify the security settings of each Bluetooth device to ensure they match the intended configuration.

Fix

Related Identifiers

CVE-2005-2504

Affected Products

Macos X

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2504 · Security Note
• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Patch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Patch, Vendor Advisory