PT-2007-5860 · Apple · Macos X

Published 2007-11-15 · Updated 2017-07-29 · CVE-2007-4702

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X version 10.5

Description: The issue concerns the Application Firewall in Apple Mac OS X, where enabling "Block all incoming connections" does not effectively block connections for root processes or mDNSResponder, potentially allowing remote attackers or local root processes to bypass intended access restrictions.

Recommendations: For Apple Mac OS X version 10.5, consider disabling the "Block all incoming connections" feature and instead implement more specific, restrictive firewall rules to minimize the risk of unauthorized access. Additionally, restrict access to root processes and mDNSResponder to prevent potential exploitation.

Fix

Related Identifiers

CVE-2007-4702

Affected Products

Macos X

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-4702 · Security Note
• http://secunia.com/advisories/27695 · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=307004 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38506 · Note
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html · Patch, Vendor Advisory
• http://vupen.com/english/advisories/2007/3897 · Note
• http://securitytracker.com/id?1018958 · Note
• http://securityfocus.com/bid/26461 · Note