PT-2005-3409 · Apple · Macos X

Chris Pepper + 1 · Published 2005-08-19 · Updated 2008-09-05 · CVE-2005-2510

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.4 through 10.4.2

Description The issue concerns the Server Admin tool in servermgr ipfilter, which may not properly write firewall rules when using multiple subnets and Address Groups under certain conditions. This could lead to firewall policies being less restrictive than intended by the administrator.

Recommendations For Mac OS X versions 10.4 through 10.4.2, consider manually reviewing and adjusting firewall rules to ensure they align with the intended policies until a fix is available. As a temporary workaround, restrict access to sensitive resources and networks to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2510

Affected Products

Macos X

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2510 · Security Note
• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1014708 · Note
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Patch, Vendor Advisory