PT-2015-3060 · Apple+1 · Os X Server+1

Zachary Jones · Published 2015-09-18 · Updated 2016-12-22 · CVE-2015-5911

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.0.3

Description The issue is related to multiple unspecified vulnerabilities in the Twisted module of the Wiki Server in OS X Server. These vulnerabilities are caused by errors in the code. An attacker, acting remotely, can exploit these vulnerabilities by using a specially crafted XML document, potentially compromising the confidentiality, integrity, and availability of protected information.

Recommendations For OS X Server versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the Wiki Server or disabling the Twisted module until the update can be applied. Avoid using the Wiki Server with untrusted XML documents until the issue is resolved.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00265

CVE-2015-5911

Affected Products

Os X Server

Twisted

References · 5

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html · Vendor Advisory
• https://support.apple.com/HT205219 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00265 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-5911 · Security Note
• http://securitytracker.com/id/1033595 · Note