PT-2008-1708 · Apple · Macos X

Published 2008-03-18 · Updated 2017-08-08 · CVE-2008-0046

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.2

Description The Application Firewall in Apple Mac OS X has an incorrect German translation for the "Set access for specific services and applications" radio button. This might cause the user to believe that the button is used to restrict access only to specific services and applications, potentially allowing attackers to bypass intended access restrictions.

Recommendations For Apple Mac OS X version 10.5.2, consider using the English translation or seeking additional guidance to ensure proper configuration of the Application Firewall to avoid unintended access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-0046

Affected Products

Macos X

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-0046 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41317 · Note
• http://docs.info.apple.com/article.html?artnum=307562 · Note
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Patch, Vendor Advisory
• http://secunia.com/advisories/29420 · Note
• http://securitytracker.com/id?1019658 · Note
• http://us-cert.gov/cas/techalerts/TA08-079A.html · Note
• http://securityfocus.com/bid/28368 · Note
• http://securityfocus.com/bid/28304 · Note
• http://vupen.com/english/advisories/2008/0924/references · Note