PT-2012-2763 · Apple · Macos X

Espectalll123 + 1 · Published 2012-05-11 · Updated 2017-12-05 · CVE-2012-0656

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.3

Description A race condition exists in the LoginUIFramework of Apple Mac OS X, allowing physically proximate attackers to login to arbitrary accounts by entering the account name and no password when the Guest account is enabled.

Recommendations For Apple Mac OS X versions 10.7.x through 10.7.3, update to version 10.7.4 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2012-0656

Affected Products

Macos X

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-0656 · Security Note
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Vendor Advisory
• http://support.apple.com/kb/HT5281 · Vendor Advisory
• http://securityfocus.com/bid/53459 · Note
• http://securityfocus.com/bid/53445 · Note