PT-2007-5862 · Apple · Macos X

Published 2007-11-15 · Updated 2017-07-29 · CVE-2007-4704

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X version 10.5

Description: The issue concerns the Application Firewall in Apple Mac OS X, which fails to apply changed settings to processes started by launchd until these processes are restarted. This might allow attackers to bypass intended access restrictions.

Recommendations: For Apple Mac OS X version 10.5, restart processes started by launchd after changing Application Firewall settings to ensure the new settings are applied.

Fix

Related Identifiers

CVE-2007-4704

Affected Products

Macos X

References · 8

• http://secunia.com/advisories/27695 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3897 · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=307004 · Patch
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4704 · Security Note
• http://securitytracker.com/id?1018958 · Note
• http://securityfocus.com/bid/26459 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38492 · Note