PT-2012-2781 · Apple · Macos X

Renaud Deraison · Published 2012-05-11 · Updated 2012-05-30 · CVE-2012-0675

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.4

Description The issue concerns the Time Machine feature in Mac OS X, where it fails to maintain SRP-based authentication after initial use, allowing remote attackers to access Time Capsule credentials by spoofing the backup volume.

Recommendations For versions prior to 10.7.4, update to version 10.7.4 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-0675

Affected Products

Macos X

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-0675 · Security Note
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Vendor Advisory
• http://support.apple.com/kb/HT5281 · Vendor Advisory
• http://securityfocus.com/bid/53445 · Note