PT-2008-5007 · Apple · Itunes+1

Eric Hall · Published 2008-09-10 · Updated 2008-09-11 · CVE-2008-3634

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 8.0 on Mac OS X 10.4.11

Description The issue presents misleading information about firewall security when iTunes Music Sharing is enabled but blocked by the host-based firewall. This might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.

Recommendations For Apple iTunes versions prior to 8.0 on Mac OS X 10.4.11, update to version 8.0 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-3634

Affected Products

Macos X

Itunes

References · 4

• http://securityfocus.com/bid/31090 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-3634 · Security Note
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html · Vendor Advisory
• http://securitytracker.com/id?1020840 · Note