PT-2010-1274 · Apple · Macos X

Michael Kisor · Published 2010-03-30 · Updated 2010-03-31 · CVE-2009-2801

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.8

Description The issue is related to a timing problem in the Application Firewall, which causes it to drop unspecified firewall rules after a system reboot. This might allow remote attackers to bypass intended access restrictions by sending specially crafted packet data.

Recommendations For Apple Mac OS X version 10.5.8, consider restarting the Application Firewall service after each reboot to minimize the risk of exploitation. Additionally, restrict access to sensitive services and data to reduce the potential impact of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2801

Affected Products

Macos X

References · 2

• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2801 · Security Note