Vulnerabilities > CVE-2007-4704 - Unspecified vulnerability in Apple mac OS X 10.5
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN apple
nessus
Summary
The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 1 |
Nessus
NASL family | MacOS X Local Security Checks |
NASL id | MACOSX_10_5_1.NASL |
description | The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.1. This update contains several security fixes for the application Firewall. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 28252 |
published | 2007-11-16 |
reporter | This script is Copyright (C) 2007-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/28252 |
title | Mac OS X 10.5.x < 10.5.1 Multiple Vulnerabilities |
code |
|
Seebug
bulletinFamily | exploit |
description | BUGTRAQ ID: 26459 CVE(CAN) ID: CVE-2007-4704 Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的应用防火墙设置存在漏洞,可能由于错误的安全认识导致非授权网络访问。 在更改Mac OS X的应用防火墙设置时,重启系统之前launchd所启动的进程不会受影响,但用户可能以为更改应立即生效,这可能会造成错误的安全认知,将系统暴露于某些网络访问。 Apple Mac OS X 10.5 Apple MacOS X Server 10.5 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: <a href="http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16133&cat=60&platform=osx&method=sa/MacOSXUpd10.5.1.dmg" target="_blank">http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16133&cat=60&platform=osx&method=sa/MacOSXUpd10.5.1.dmg</a> <a href="http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16134&cat=60&platform=osx&method=sa/MacOSXServerUpd10.5.1.dmg" target="_blank">http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16134&cat=60&platform=osx&method=sa/MacOSXServerUpd10.5.1.dmg</a> |
id | SSV:2431 |
last seen | 2017-11-19 |
modified | 2007-11-17 |
published | 2007-11-17 |
reporter | Root |
title | Apple Max OS X应用防火墙Launchd绕过安全限制漏洞 |
References
- http://docs.info.apple.com/article.html?artnum=307004
- http://docs.info.apple.com/article.html?artnum=307004
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
- http://secunia.com/advisories/27695
- http://secunia.com/advisories/27695
- http://securitytracker.com/id?1018958
- http://securitytracker.com/id?1018958
- http://www.securityfocus.com/bid/26459
- http://www.securityfocus.com/bid/26459
- http://www.vupen.com/english/advisories/2007/3897
- http://www.vupen.com/english/advisories/2007/3897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38492
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38492