PT-2008-1699 · X.Org Foundation+1 · X11+1

Published 2008-02-12 · Updated 2011-03-08 · CVE-2008-0037

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5 through 10.5.1

Description The issue is related to X11 in Mac OS X, where it does not properly handle the "Allow connections from network client" preference when it is disabled. This allows remote attackers to bypass intended access restrictions and connect to the X server.

Recommendations For Mac OS X versions 10.5 through 10.5.1, consider disabling the X11 service until a patch is available to prevent remote attackers from connecting to the X server.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-0037

Affected Products

Macos X

X11

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-0037 · Security Note
• http://securityfocus.com/bid/27736 · Note
• http://docs.info.apple.com/article.html?artnum=307430 · Note
• http://secunia.com/advisories/28891 · Note
• http://us-cert.gov/cas/techalerts/TA08-043B.html · Note
• http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1019365 · Note
• http://vupen.com/english/advisories/2008/0495/references · Note