PT-2007-5861 · Apple · Macos X

Published 2007-11-15 · Updated 2017-07-29 · CVE-2007-4703

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X version 10.5

Description: The issue concerns the Application Firewall in Apple Mac OS X, which fails to prevent a root process from accepting incoming connections. This occurs even when the "Block incoming connections" option has been set for its associated executable, potentially allowing remote attackers or local root processes to bypass intended access restrictions.

Recommendations: For Apple Mac OS X version 10.5, consider disabling the executable associated with the vulnerable Application Firewall setting until a patch is available, or apply specific configuration changes to restrict incoming connections for root processes.

Fix

Related Identifiers

CVE-2007-4703

Affected Products

Macos X

References · 8

• http://secunia.com/advisories/27695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4703 · Security Note
• http://vupen.com/english/advisories/2007/3897 · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=307004 · Patch
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38479 · Note
• http://securitytracker.com/id?1018958 · Note
• http://securityfocus.com/bid/26460 · Note