PT-2007-2190 · Apple · Macos X

Published 2007-04-24 · Updated 2011-03-08 · CVE-2007-0739

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.9

Description The issue allows local users to bypass authentication controls due to the Login Window displaying the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.9, update to a version that fixes this issue to prevent local users from bypassing authentication controls.

Fix

Related Identifiers

CVE-2007-0739

Affected Products

Macos X

References · 9

• http://securityfocus.com/bid/23569 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-0739 · Security Note
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Vendor Advisory
• http://securitytracker.com/id?1017939 · Note
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Note
• http://secunia.com/advisories/24966 · Note
• http://osvdb.org/34864 · Note
• http://vupen.com/english/advisories/2007/1470 · Note
• http://docs.info.apple.com/article.html?artnum=305391 · Note