PT-2010-2260 · Apple · Ichat Server+1

Published 2010-03-30 · Updated 2010-03-31 · CVE-2010-0502

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mac OS X Server versions prior to 10.6.3

Description The issue is related to the iChat Server in Mac OS X Server. When group chat is used, it does not perform logging for all types of messages. This might allow remote attackers to avoid message auditing by selecting an unspecified type of message.

Recommendations For versions prior to 10.6.3, update to version 10.6.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-0502

Affected Products

Macos X Server

Ichat Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-0502 · Security Note
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Vendor Advisory
• http://support.apple.com/kb/HT4077 · Vendor Advisory