PT-2009-2842 · Apple+1 · Macos X+1

Chris Adams · Published 2009-05-13 · Updated 2024-02-14 · CVE-2009-0152

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5 through 10.5.6

Description The issue allows remote attackers to obtain sensitive information by sniffing the network due to the disabling of SSL for AOL Instant Messenger (AIM) communication in certain circumstances. This occurs when the Require SSL setting is inconsistent.

Recommendations For Apple Mac OS X versions 10.5 through 10.5.6, update to version 10.5.7 to resolve the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2009-0152

Affected Products

Aim

Macos X

References · 9

• http://support.apple.com/kb/HT3549 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0152 · Security Note
• http://securityfocus.com/bid/34926 · Note
• http://securitytracker.com/id?1022212 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50487 · Note
• http://secunia.com/advisories/35074 · Note
• http://us-cert.gov/cas/techalerts/TA09-133A.html · Note
• http://vupen.com/english/advisories/2009/1297 · Note